New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 HCISPP Exam - Topic 2 Question 102 Discussion

Actual exam question for ISC2's HCISPP exam
Question #: 102
Topic #: 2
[All HCISPP Questions]

An organization is outsourcing its payroll system and is requesting to conduct a full audit on the third-party information technology (IT) systems. During the due diligence process, the third party provides previous audit report on its IT system.

Which of the following MUST be considered by the organization in order for the audit reports to be acceptable?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Miriam
2 months ago
Surprised that senior management signatures aren't a must!
upvoted 0 times
...
Malinda
2 months ago
Wait, why does it have to be an international firm?
upvoted 0 times
...
Brianne
3 months ago
I think the timing of the report matters too.
upvoted 0 times
...
Ricki
3 months ago
Totally agree, independence is key.
upvoted 0 times
...
Brunilda
3 months ago
Gotta be from an independent assessor!
upvoted 0 times
...
Johnetta
3 months ago
I thought it was important for the audit to be from a recognized firm, but now I’m questioning if that’s the only thing that matters.
upvoted 0 times
...
Kristel
4 months ago
I feel like we practiced a question similar to this, and it emphasized that the auditor should be independent rather than just being from a well-known firm.
upvoted 0 times
...
Pamella
4 months ago
I’m not entirely sure, but I think the timing of the audit reports matters too. Like, if they’re too old, they might not be relevant anymore.
upvoted 0 times
...
Matt
4 months ago
I remember we discussed the importance of having an independent assessor for audit reports. It seems like that would be crucial for credibility.
upvoted 0 times
...
Jeniffer
4 months ago
I'm a little confused by this question. Is the timing of the report really the most important factor, or is there something else I'm missing? I'll have to review the information carefully and try to identify the critical requirement.
upvoted 0 times
...
King
4 months ago
Okay, I think I've got this. The key thing is that the audit needs to be conducted by an independent assessor, not just someone from the third-party organization. That ensures the objectivity and reliability of the findings.
upvoted 0 times
...
Merlyn
5 months ago
Hmm, I'm a bit unsure about this one. I know the audit reports need to meet certain criteria, but I'm not sure if the independence of the assessor or the timing of the report is more important. I'll have to think this through.
upvoted 0 times
...
Coleen
5 months ago
This seems like a straightforward question about the requirements for accepting third-party audit reports. I'll need to carefully read through the options and think about which one is the most critical factor.
upvoted 0 times
...
Lauran
8 months ago
That's a good point, but I still think independence is the most important factor.
upvoted 0 times
...
Reita
9 months ago
But what about option D? Wouldn't an international audit firm add more credibility?
upvoted 0 times
...
Jillian
9 months ago
I agree with Lauran, independence is crucial for credibility.
upvoted 0 times
...
Lauran
9 months ago
I think option A is important because it ensures independence.
upvoted 0 times
...
Stefany
9 months ago
Forget the audit report, I just want to know if the third-party can cook the books as well as my ex-accountant.
upvoted 0 times
Anjelica
8 months ago
B) The audit reports have been signed by the third-party senior management.
upvoted 0 times
...
Maile
8 months ago
A) The audit assessment has been conducted by an independent assessor.
upvoted 0 times
...
Lura
8 months ago
C) The audit reports have been issued in the last six months.
upvoted 0 times
...
Agustin
8 months ago
B) The audit reports have been signed by the third-party senior management.
upvoted 0 times
...
Frederic
9 months ago
A) The audit assessment has been conducted by an independent assessor.
upvoted 0 times
...
...
Vallie
10 months ago
Ah, but what if the third-party is a global IT giant? Surely their internal audit team is up to par.
upvoted 0 times
Judy
8 months ago
D) The audit assessment has been conducted by an international audit firm.
upvoted 0 times
...
Ulysses
8 months ago
B) The audit reports have been signed by the third-party senior management.
upvoted 0 times
...
Novella
9 months ago
A) The audit assessment has been conducted by an independent assessor.
upvoted 0 times
...
...
Miss
10 months ago
Hold on, the audit reports need to be recent too. Six months is a reasonable timeframe.
upvoted 0 times
...
Lamonica
10 months ago
I agree, the independence of the assessor is crucial. No one wants a biased evaluation.
upvoted 0 times
Estrella
8 months ago
C) The audit reports have been issued in the last six months.
upvoted 0 times
...
Robt
8 months ago
B) The audit reports have been signed by the third-party senior management.
upvoted 0 times
...
Ollie
8 months ago
A) The audit assessment has been conducted by an independent assessor.
upvoted 0 times
...
...
Germaine
10 months ago
The audit assessment must have been conducted by an independent assessor. That's the key criteria here.
upvoted 0 times
Tamar
9 months ago
C) The audit reports have been issued in the last six months.
upvoted 0 times
...
Jacqueline
9 months ago
B) The audit reports have been signed by the third-party senior management.
upvoted 0 times
...
Krystina
10 months ago
A) The audit assessment has been conducted by an independent assessor.
upvoted 0 times
...
...

Save Cancel