CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ140

Protection of Information Assets

For an organization planning to implement web-based trading, it would be MOST important for an IS auditor to confirm that the organization’s information security plan includes:

Explanation

Security requirements for the new application establish the security controls and protections that must be designed, implemented, and tested for web-based trading. They provide the necessary foundation for more specific measures such as firewall settings, password rules, and security training.

Community Discussion

No comments yet. Be the first to start the discussion!