CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ77

Information System Auditing Process

While planning a cloud service audit, audit management learns that the assigned IS auditor is not familiar with the technologies being used or their related risks to the business. To ensure audit quality, which action should audit management consider FIRST?

Explanation

An audit engagement must be staffed with personnel who have the knowledge and skills needed to evaluate the relevant technology and business risks. Assigning the audit to an internal audit subject-matter expert addresses the current competency deficiency and supports a reliable audit conclusion; additional time, postponement, or later follow-up does not provide the required expertise.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!