Audit Management Flashcards
7 cards from real CCISO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Audit Management flashcards as text
A CISO wants to ensure audit recommendations are implemented on schedule. Which mechanism is most effective?
Answer: Establishing a formal tracking system with defined owners, due dates, and periodic status reviews
A formal tracking system with assigned owners, deadlines, and status reviews ensures systematic, accountable remediation of audit findings.
Under the ISACA IT Audit framework, which term describes the root cause of a control deficiency?
Answer: Cause
In audit finding structure, 'cause' identifies why the control deficiency exists, helping management address the underlying problem rather than just the symptom.
Which type of audit opinion is issued when auditors cannot obtain sufficient appropriate evidence to form a conclusion?
Answer: Disclaimer of opinion
A disclaimer of opinion is issued when the auditor is unable to obtain sufficient evidence, making it impossible to express any audit opinion.
Which international standard provides the primary framework for internal audit activity globally?
Answer: IIA International Standards for the Professional Practice of Internal Auditing
The IIA's International Standards for the Professional Practice of Internal Auditing is the globally accepted framework governing internal audit quality and independence.
A CISO is designing an audit universe. Which factor should have the greatest influence on audit prioritization?
Answer: The risk level and potential impact associated with each auditable entity
Audit prioritization should be driven by risk level and potential business impact so that limited audit resources address the most significant exposures.
What is the primary purpose of an audit committee in corporate governance?
Answer: To provide independent oversight of financial reporting, internal controls, and the audit process
The audit committee provides board-level, independent oversight of financial reporting integrity, internal controls, and external and internal audit activities.
In continuous auditing, what distinguishes it from traditional periodic auditing?
Answer: Continuous auditing employs automated tools to assess controls and data on an ongoing basis
Continuous auditing uses automated monitoring tools to evaluate controls and transactions on an ongoing basis rather than waiting for periodic scheduled reviews.