CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ123

Protection of Information Assets

Which of the following offers the BEST evidence of the validity and integrity of logs in an organization’s security information and event management (SIEM) system?

Explanation

Substantive testing provides direct evidence about the completeness, accuracy, and integrity of SIEM logs by examining the recorded data and corroborating it against underlying events or other reliable evidence.

Community Discussion

No comments yet. Be the first to start the discussion!