Which of the following is MOST important for an IS auditor to consider when evaluating an organization's effectiveness in mitigating Internal fraud risk?

• A.Segregation of duty controls
• B.Data encryption controls
• C.Data leakage prevention controls
• D.Network monitoring controls

Comment: *

Name: *

Email: *

Verification: *

An IS auditor discovered abnormalities in a monthly report generated from a system upgraded six months ago. Which of the following should be the auditor's FIRST course of action?

• A.Schedule an access review of the system.
• B.Perform a change management review of the system
• C.Inspect source code for proof of abnormalities.
• D.Determine the impact of abnormalities in the report

Comment: *

Name: *

Email: *

Verification: *

A CIO has asked an IS auditor to implement several security controls for an organization's IT process and
systems. The auditor should:

• A.perform the assignment and future audits with the due professional care.
• B.obtain approval from executive management for the implementation.
• C.refuse due to independence issues.
• D.communicate the conflict of interest to audit management.

Comment: *

Name: *

Email: *

Verification: *

During a project audit, an IS auditor notes that project reporting does not accurately reflect current progress. Which of the following is the GREATEST resulting impact?

• A.The project steering committee cannot provide effective governance.
• B.The project will not withstand a quality assurance (QA) review.
• C.The project manager will have to be replaced.
• D.The project reporting to the board of directors will be incomplete.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a detective control that can be used to uncover unauthorized access to information systems?

• A.Requiring internal audit to perform periodic reviews of system access logs
• B.Protecting access to the data center with multif actor authentication
• C.Requiring long and complex passwords for system access
• D.Implementing a security information and event management (SIEM) system

Comment: *

Name: *

Email: *

Verification: *