Isaca Exam CISA Topic 7 Question 82 Discussion

Actual exam question for Isaca's CISA exam

Question #: 82
Topic #: 7

[All CISA Questions]

Which of the following BEST contributes to the quality of an audit of a business-critical application?

AAssigning the audit to independent external auditors

BReviewing previous findings reported by the application owner

CIdentifying common coding errors made by the development team

DInvolving the application owner early in the audit planning process

Show Suggested Answer

Suggested Answer: A

This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.

by Eden at Jul 18, 2024, 11:25 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rashad

2 months ago

Ooh, I bet the development team is just sweating bullets at the thought of those auditors finding all their hidden bugs. Better start updating those resumes, guys!

upvoted 0 times

Sharika

18 days ago

D) Involving the application owner early in the audit planning process

upvoted 0 times

...

Arlyne

1 months ago

B) Reviewing previous findings reported by the application owner

upvoted 0 times

...

Juan

1 months ago

A) Assigning the audit to independent external auditors

upvoted 0 times

...

Claribel

2 months ago

Well, if the application is business-critical, I don't think we can afford to skimp on the audit process. Might as well do it right and get the application owner involved from the start.

upvoted 0 times

Lisandra

10 days ago

B) Reviewing previous findings reported by the application owner

upvoted 0 times

...

Quentin

16 days ago

A) Assigning the audit to independent external auditors

upvoted 0 times

...

Lenny

2 months ago

D) Involving the application owner early in the audit planning process

upvoted 0 times

...

Eric

2 months ago

Haha, identifying common coding errors? That's like trying to find a needle in a haystack. I'd much rather have those expert external auditors take a look.

upvoted 0 times

Bettye

1 months ago

But involving the application owner early on can also help in understanding the specific risks and controls in place.

upvoted 0 times

...

Myra

1 months ago

I agree, having external auditors would definitely provide a fresh perspective.

upvoted 0 times

...

Yolande

2 months ago

Reviewing previous findings is a good start, but I think involving the application owner early on is crucial. They'll have the inside knowledge to really help guide the audit.

upvoted 0 times

...

Skye

2 months ago

Independent external auditors definitely seem like the most reliable option. They can bring a fresh perspective and have no vested interest in the application's performance.

upvoted 0 times

...