28 Questions
What aspect of IT projects within an organization's strategic plan should have IT requirements incorporated into?
Planning phase
Which statement aligns best with data classification standards in terms of protecting information assets?
All information assets will be assigned a clearly defined level to facilitate proper employee handling.
Who is responsible for ensuring the representation of major stakeholders involved in a project?
Steering committee
What is the primary measure of an organization’s security program effectiveness?
Adverse impact of incidents on critical business activities
What is the BEST course of action for an IS auditor when critical deficiencies have not been addressed after a follow-up audit?
Assess the impact of not addressing deficiencies.
Why would an organization separate the development and test IT processing environments?
Protect programs under development from unauthorized testing.
What is a common issue that organizations face due to the lack of quick modification and deployment of solutions?
Inability to adapt to changing business needs.
What is a significant advantage of having three separate IT processing environments in an organization?
Improved control over software development processes.
Why is it important for an organization to mitigate calculation errors in spreadsheets?
To improve decision-making based on accurate data.
What should an IS auditor look for to ensure management adequately balances business needs and risk management?
Implementation of risk management frameworks.
What is the primary reason for implementing data encryption on desktops?
To reduce the risk of data leakage
Which scenario poses the GREATEST risk associated with data leakage?
There is no requirement for desktops to be encrypted
When an intrusion into an organization's network is detected, what should be the FIRST step taken?
Identify nodes that have been compromised
What is the MOST important aspect for an IS auditor to assess in a project feasibility study?
An assessment of whether the expected benefits can be achieved
What is the GREATEST concern when a business-critical application lacks fault tolerance?
Single point of failure
Which action can help mitigate the risk of data leakage when staff work remotely?
Encrypting all desktops in the office
Which of the following tasks would raise the LEAST segregation of duties (SoD) concern if performed by the person who reconciles the organization's device inventory?
Creating the device policy
What should be the IS auditor's PRIMARY recommendation regarding emergency fixes made by programmers in a data center?
Emergency program changes should be subject to program migration and testing procedures before they are applied to operational systems
What is a significant concern for an IS audit manager when a new auditor in the department previously worked for a cloud service provider?
Independence
If a person who reconciles the organization's device inventory also approves the issuing of devices, what segregation of duties (SoD) concern is MOST likely raised?
Unauthorized device issuance
What is the BEST way to address the segregation of duties (SoD) concern if the same individual is responsible for both tracking devices used for spare parts and issuing devices to employees?
Rotating responsibilities between different staff members
What should be the primary focus of an IS auditor when evaluating emergency fixes made by programmers in operational systems?
Preserving system integrity
What is the MOST reliable follow-up procedure for the IS auditor to determine if sequential order numbers are generated?
Inspect the system settings and transaction logs
When evaluating network monitoring controls, what is the MOST important for an IS auditor to review?
Incident monitoring logs
What would be of GREATEST concern to an IS auditor reviewing the feasibility study for a new application system?
Unclear system operating conditions
Which of the following poses the GREATEST risk to an organization related to system interfaces?
Notifications of data transfers not retained
What should an IS auditor primarily focus on while reviewing controls related to network monitoring?
Analyzing network traffic patterns for anomalies
When conducting a follow-up audit, what should an IS auditor prioritize in terms of assessing sequential order numbering generation?
Reviewing system settings for sequential number generation
Test your knowledge on IT strategic planning, alignment with corporate strategy, and data classification standards related to protecting information assets. This quiz covers topics such as strategic project approval, IT requirements in action plans, controls and safeguards in the IT strategic plan, and acceptable use policy statements.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
