CISA Certified Information Systems Auditor – Question0731

Which of the following are the PRIMARY considerations when determining the timing of remediation testing?

A.
The level of management and business commitment to implementing agreed action plans
B. The difficulty of scheduling resources and availability of management for a follow-up engagement
C. The availability and competencies of control owners for implementing the agreed action
D. The significance of the reported findings and the impact if corrective actions are not taken

Correct Answer: D