CISA Certified Information Systems Auditor – Question1901

IS audits should be selected through a risk analysis process to concentrate on:

A.
those areas of greatest risk and opportunity for improvements.
B. those areas of least risk and opportunity for improvements.
C. those areas of the greatest financial value.
D. areas led by the key people of the organization.
E. random events.
F. irregular events.

Correct Answer: A

Explanation:

Explanation:
Audits are typically selected through a risk analysis process to concentrate on those areas of greatest risk and opportunity for improvements.
Audit topics are supposed to be chosen based on potential for cost savings and service improvements.