IS Audit Cell Responsibilities
14 Questions
1 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Who is responsible for auditing Centralized Information Systems at DC, DR, CO, NDR?

  • Inspection Department
  • Information Technology Department
  • CISO
  • IS Audit Cell (correct)

Who is responsible for auditing Information Systems at ZO/Branches?

  • CISO
  • IS Audit cell of Inspection Department (correct)
  • Inspection & Audit Department
  • Information Technology Department

Who consolidates the audit reports and provides them to CO: Inspection?

  • Information Technology Department
  • Inspection centers (correct)
  • IS Audit Cell
  • CISO

Who is responsible for correcting the deviations pointed out by the Auditors?

<p>Information Technology Department and the other application owners (B)</p> Signup and view all the answers

What is one of the criteria for performing information security risk assessments according to the text?

<p>Establishing risk acceptance criteria (B)</p> Signup and view all the answers

What is one of the requirements to ensure repeated information security risk assessments produce consistent results?

<p>Maintaining information security risk criteria (C)</p> Signup and view all the answers

What is one of the steps involved in analyzing information security risks as per the text?

<p>Assessing potential consequences of identified risks (B)</p> Signup and view all the answers

What is one of the key requirements for retaining documented information about the information security risk assessment process?

<p>Establishing and maintaining information security risk criteria (D)</p> Signup and view all the answers

What is one of the types of measures that should be provided for in the comprehensive set of metrics according to the text?

<p>$Key Performance Indicators$ (B)</p> Signup and view all the answers

What is one of the key requirements for retaining documented information about the information security risk assessment process?

<p>Establishing and maintaining information security risk criteria (D)</p> Signup and view all the answers

What is one of the criteria for performing information security risk assessments according to the text?

<p>Applying the process to identify risks associated with confidentiality, integrity, and availability (C)</p> Signup and view all the answers

Who is responsible for auditing Centralized Information Systems at DC, DR, CO, NDR?

<p>Audit department (D)</p> Signup and view all the answers

What is one of the types of measures that should be provided for in the comprehensive set of metrics according to the text?

<p>Key Performance Indicators and Key Risk Indicators (A)</p> Signup and view all the answers

What is one of the steps involved in analyzing information security risks as per the text?

<p>Assessing potential consequences and likelihood of occurrence (D)</p> Signup and view all the answers

More Like This

Use Quizgecko on...
Browser
Browser