Certified Information Systems Auditor CISA · Free Practice Question Medium
Question 13
You are an information system auditor of HDA Inc. You discover during a follow-up audit that certain recommendations were not implemented, and senior management accepted the risks associated with those recommendations. What is the IS auditor's BEST course of action?
- A A. Ignore the situation as senior management has accepted the risks.
- B B. Escalate the issue to senior management and demand immediate implementation of the recommendations.
- C C. Determine the impact of senior management's acceptance of the risk.
- D D. Initiate legal action against senior management for non-compliance.
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Determine the impact of senior management's acceptance of the risk. Explanation: As an IS auditor, it is important to assess the impact of senior management's acceptance of the risks. While it may be concerning that the recommendations were not implemented, senior management has the authority to make decisions regarding risk acceptance. However, it is essential to evaluate the potential consequences of their decision. By determining the impact, the IS auditor can provide valuable insights and recommendations to senior management regarding the potential risks and their potential impact on the organization. This allows for informed decision-making and proactive risk management. Ignoring the situation (option A) is not advisable as it does not address the underlying concerns. Escalating the issue and demanding immediate implementation (option B) may not be the most appropriate course of action without first understanding the impact. Initiating legal action (option D) should be considered only in cases of serious non-compliance or illegal activities, which is not evident from the given scenario. Therefore, option C is the best course of action for the IS auditor.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
