Isaca CISA Exam - Topic 7 Question 82 Discussion

Actual exam question for Isaca's CISA exam

Question #: 82
Topic #: 7

[All CISA Questions]

Which of the following BEST contributes to the quality of an audit of a business-critical application?

AAssigning the audit to independent external auditors

BReviewing previous findings reported by the application owner

CIdentifying common coding errors made by the development team

DInvolving the application owner early in the audit planning process

Show Suggested Answer

Suggested Answer: A

This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.

by Eden at Jul 18, 2024, 11:25 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Buddy

3 months ago

Not sure about A, external auditors might not know the app well enough.

upvoted 0 times

...

Lajuana

3 months ago

B makes sense too, previous findings can guide the audit.

upvoted 0 times

...

Lilli

3 months ago

Wait, how does C help with the audit quality? Seems a bit off.

upvoted 0 times

...

Ma

4 months ago

Totally agree with D! Involving the owner early is crucial.

upvoted 0 times

...

Anissa

4 months ago

I think A is the best option. Independent auditors bring fresh perspectives.

upvoted 0 times

...

Zita

4 months ago

Identifying coding errors seems relevant, but I wonder if that’s more of a development issue than an audit quality factor.

upvoted 0 times

...

Ryan

4 months ago

I’m a bit confused about the role of external auditors. I know they bring objectivity, but do they really contribute more than the application owner’s insights?

upvoted 0 times

...

Yaeko

4 months ago

I think reviewing previous findings is important too, especially since it helps identify recurring issues. It feels like a solid choice.

upvoted 0 times

...

Gianna

5 months ago

I remember we discussed how involving the application owner early could help clarify expectations, but I'm not sure if that's the best option overall.

upvoted 0 times

...

Oren

5 months ago

Involving the application owner early on makes a lot of sense to me. They would have valuable insights and can help the auditors understand the system better.

upvoted 0 times

...

Lemuel

5 months ago

Assigning the audit to independent external auditors seems like the obvious choice here. That would help ensure objectivity and thoroughness in the audit process.

upvoted 0 times

...

Vi

5 months ago

Hmm, I'm a bit unsure about this one. There are a few different factors that could impact audit quality, so I'll need to weigh the pros and cons of each choice.

upvoted 0 times

...

Lynette

5 months ago

This seems like a straightforward question about audit best practices. I'll need to carefully consider each option and think about what would contribute most to the quality of the audit.

upvoted 0 times

...

Ryann

5 months ago

I'm not sure about identifying common coding errors - that seems more like a software testing activity than an audit focus. I'll have to think this one through carefully.

upvoted 0 times

...

Lavelle

5 months ago

Hmm, this seems to be asking about the key measurement domains for Business Agility. I'll need to think carefully about the concepts of outcomes, competency, flow, PI objectives, and KPIs to determine the best answer.

upvoted 0 times

...

Kiera

5 months ago

Hmm, this seems like a tricky one. I'll need to think through the SAML authentication flow carefully to figure this out.

upvoted 0 times

...

Tuyet

5 months ago

Hmm, I'm a bit unsure about the difference between "repeatable" and "not repeatable" in this context. I'll need to think that through carefully.

upvoted 0 times

...

Rashad

10 months ago

Ooh, I bet the development team is just sweating bullets at the thought of those auditors finding all their hidden bugs. Better start updating those resumes, guys!

upvoted 0 times

Sharika

9 months ago

D) Involving the application owner early in the audit planning process

upvoted 0 times

...

Arlyne

9 months ago

B) Reviewing previous findings reported by the application owner

upvoted 0 times

...

Juan

10 months ago

A) Assigning the audit to independent external auditors

upvoted 0 times

...

Claribel

10 months ago

Well, if the application is business-critical, I don't think we can afford to skimp on the audit process. Might as well do it right and get the application owner involved from the start.

upvoted 0 times

Lisandra

9 months ago

B) Reviewing previous findings reported by the application owner

upvoted 0 times

...

Quentin

9 months ago

A) Assigning the audit to independent external auditors

upvoted 0 times

...

Lenny

10 months ago

D) Involving the application owner early in the audit planning process

upvoted 0 times

...

Eric

10 months ago

Haha, identifying common coding errors? That's like trying to find a needle in a haystack. I'd much rather have those expert external auditors take a look.

upvoted 0 times

Bettye

9 months ago

But involving the application owner early on can also help in understanding the specific risks and controls in place.

upvoted 0 times

...

Myra

10 months ago

I agree, having external auditors would definitely provide a fresh perspective.

upvoted 0 times

...

Yolande

10 months ago

Reviewing previous findings is a good start, but I think involving the application owner early on is crucial. They'll have the inside knowledge to really help guide the audit.

upvoted 0 times

...

Skye

10 months ago

Independent external auditors definitely seem like the most reliable option. They can bring a fresh perspective and have no vested interest in the application's performance.

upvoted 0 times

...