CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ99

Information System Auditing Process

An IS auditor is reviewing a sample of access events recorded in an application's system log. The auditor plans to initiate an intensive investigation if a single exception is identified. Which sampling method is appropriate?

Explanation

Discovery sampling is used when exceptions are expected to be rare and the detection of even one exception warrants further action or investigation.

Community Discussion

No comments yet. Be the first to start the discussion!