MENU
Which of the following BEST contributes to the quality of an audit of a business-critical application?
Suggested Answer: A
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.
33 comments · newest first
BU
Buddy
10 months ago
Not sure about A, external auditors might not know the app well enough.
LA
Lajuana
11 months ago
B makes sense too, previous findings can guide the audit.
LI
Lilli
11 months ago
Wait, how does C help with the audit quality? Seems a bit off.
MA
Ma
11 months ago
Totally agree with D! Involving the owner early is crucial.
AN
Anissa
11 months ago
I think A is the best option. Independent auditors bring fresh perspectives.
ZI
Zita
12 months ago
Identifying coding errors seems relevant, but I wonder if that’s more of a development issue than an audit quality factor.
RY
Ryan
12 months ago
I’m a bit confused about the role of external auditors. I know they bring objectivity, but do they really contribute more than the application owner’s insights?
YA
Yaeko
12 months ago
I think reviewing previous findings is important too, especially since it helps identify recurring issues. It feels like a solid choice.
GI
Gianna
1 year ago
I remember we discussed how involving the application owner early could help clarify expectations, but I'm not sure if that's the best option overall.
OR
Oren
1 year ago
Involving the application owner early on makes a lot of sense to me. They would have valuable insights and can help the auditors understand the system better.
LE
Lemuel
1 year ago
Assigning the audit to independent external auditors seems like the obvious choice here. That would help ensure objectivity and thoroughness in the audit process.
VI
Vi
1 year ago
Hmm, I'm a bit unsure about this one. There are a few different factors that could impact audit quality, so I'll need to weigh the pros and cons of each choice.
LY
Lynette
1 year ago
This seems like a straightforward question about audit best practices. I'll need to carefully consider each option and think about what would contribute most to the quality of the audit.
RY
Ryann
1 year ago
I'm not sure about identifying common coding errors - that seems more like a software testing activity than an audit focus. I'll have to think this one through carefully.
LA
Lavelle
1 year ago
Hmm, this seems to be asking about the key measurement domains for Business Agility. I'll need to think carefully about the concepts of outcomes, competency, flow, PI objectives, and KPIs to determine the best answer.
KI
Kiera
1 year ago
Hmm, this seems like a tricky one. I'll need to think through the SAML authentication flow carefully to figure this out.
TU
Tuyet
1 year ago
Hmm, I'm a bit unsure about the difference between "repeatable" and "not repeatable" in this context. I'll need to think that through carefully.
RA
Rashad
1 year ago
Ooh, I bet the development team is just sweating bullets at the thought of those auditors finding all their hidden bugs. Better start updating those resumes, guys!
SH
Sharika
1 year ago
D) Involving the application owner early in the audit planning process
AR
Arlyne
1 year ago
B) Reviewing previous findings reported by the application owner
JU
Juan
1 year ago
A) Assigning the audit to independent external auditors
CL
Claribel
1 year ago
Well, if the application is business-critical, I don't think we can afford to skimp on the audit process. Might as well do it right and get the application owner involved from the start.
LI
Lisandra
1 year ago
B) Reviewing previous findings reported by the application owner
QU
Quentin
1 year ago
A) Assigning the audit to independent external auditors
LE
Lenny
1 year ago
D) Involving the application owner early in the audit planning process
ER
Eric
1 year ago
Haha, identifying common coding errors? That's like trying to find a needle in a haystack. I'd much rather have those expert external auditors take a look.
BE
Bettye
1 year ago
But involving the application owner early on can also help in understanding the specific risks and controls in place.
MY
Myra
1 year ago
I agree, having external auditors would definitely provide a fresh perspective.
YO
Yolande
1 year ago
Reviewing previous findings is a good start, but I think involving the application owner early on is crucial. They'll have the inside knowledge to really help guide the audit.
SK
Skye
1 year ago
Independent external auditors definitely seem like the most reliable option. They can bring a fresh perspective and have no vested interest in the application's performance.
DA
Danica
2 years ago
I believe reviewing previous findings reported by the application owner is also important to understand any recurring issues.
AN
Anna
2 years ago
I agree with you, Madalyn. The application owner can provide valuable insights and help ensure the audit is thorough.
MA
Madalyn
2 years ago
I think involving the application owner early in the audit planning process is crucial.