During an audit, the client learns that the IS auditor has recently completed a similar security review at a competitor. The client inquires about the competitor's audit results. What is the BEST way for the auditor to address this inquiry?

• A.Obtain permission from the competitor to use the audit results as examples for future clients.
• B.Escalate the question to the audit manager for further action.
• C.Explain that it would be inappropriate to discuss the results of another audit client
• D.Discuss the results of the audit omitting specifics related to names and products.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important factor when an organization is developing information security policies and procedures?

• A.Alignment with an information security framework
• B.Compliance with relevant regulations
• C.Consultation with security staff
• D.Inclusion of mission and objectives

Comment: *

Name: *

Email: *

Verification: *

A project team has decided to switch to an agile approach to develop a replacement tor an existing business application Which of the following should an IS auditor do FIRST to the effectiveness of the project audit?

• A.compare the agile process with previous methodology
• B.Identity and assess existing agile process controls.
• C.Understand the specific agile methodology fiat wil be followed
• D.Interview business process owners to compile a list of business requirements

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to consider when developing a bring your own device (BYOD)
policy?

• A.Supported operating systems
• B.Procedure for accessing the network
• C.Application download restrictions
• D.Remote wipe procedures

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be an IS auditor's GREATEST concern when evaluating a cybersecurity incident response plan?

• A.Rules and responsibilities are not detailed for each process
• B.The plan has not been recently tested
• C.Stakeholder contact details are not up to date
• D.The plan does not include incident response metrics

Comment: *

Name: *

Email: *

Verification: *