Isaca CISA Exam - Topic 8 Question 20 Discussion

Actual exam question for Isaca's CISA exam

Question #: 20
Topic #: 8

[All CISA Questions]

Which of the following should be the PRIMARY audience for a third-party technical security assessment report?

AOperational IT management

BBoard of directors

CLegal counsel

DExternal regulators

Show Suggested Answer

Suggested Answer: B

by Latrice at May 05, 2022, 09:20 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Blondell

4 months ago

I’m surprised this is even a question, A is clearly the right choice!

upvoted 0 times

...

Angella

4 months ago

Wait, why would external regulators be the primary audience? Seems off.

upvoted 0 times

...

Trinidad

4 months ago

B makes more sense, they need to understand risks too.

upvoted 0 times

...

Charlette

4 months ago

Totally agree with A! They’re the ones implementing changes.

upvoted 0 times

...

Bette

5 months ago

I think it should be A, operational IT management needs the details.

upvoted 0 times

...

Mona

5 months ago

I’m leaning towards legal counsel, but I guess it depends on the context of the assessment.

upvoted 0 times

...

Paris

5 months ago

I practiced a question like this, and I feel like external regulators might be the right choice since they often require compliance reports.

upvoted 0 times

...

Johnna

5 months ago

I'm not entirely sure, but I remember something about the board of directors needing to understand security risks too.

upvoted 0 times

...

Sherly

5 months ago

I think the primary audience should be Operational IT management since they need to implement the recommendations directly.

upvoted 0 times

...

Gianna

5 months ago

Hmm, this one seems tricky. I'll need to think it through carefully.

upvoted 0 times

...

Portia

5 months ago

Hmm, I'm a bit unsure about the differences between the Production and Test environments. I'll need to think this through carefully.

upvoted 0 times

...

Rodolfo

5 months ago

I remember studying that once an ECS is created, its private IP address cannot be changed, so I think it's true.

upvoted 0 times

...