Tag: CHOICES

CISA Certified Information Systems Auditor – Question2698

When implementing an IT governance framework in an organization the MOST important objective is:

A. IT alignment with the business.
B. accountability.
C. value realization with IT.
D. enhancing the return on IT investments.

Correct Answer: A

Explanation:

Explanation:
The goals of IT governance are to improve IT performance, to deliver optimum business value and to ensure regulatory compliance. The key practice in support of these goals is the strategic alignment of IT with the business {choice A). To achieve alignment, all other choices need to be tied to business practices and strategies.

CISA Certified Information Systems Auditor – Question2697

The MAJOR consideration for an IS auditor reviewing an organization's IT project portfolio is the:

A. IT budget.
B. existing IT environment.
C. business plan.
D. investment plan.

Correct Answer: C

Explanation:

Explanation:
One of the most important reasons for which projects get funded is how well a project meets an organization’s strategic objectives. Portfolio management takes a holistic view of a company’s overall IT strategy. IT strategy should be aligned with the business strategy and, hence, reviewing the business plan should be the major consideration. Choices A, B and D are important but secondary to the importance of reviewing the business plan,

CISA Certified Information Systems Auditor – Question2696

Which of the following is the MOST important element for the successful implementation of IT governance?

A. Implementing an IT scorecard
B. Identifying organizational strategies
C. Performing a risk assessment
D. Creating a formal security policy

Correct Answer: B

Explanation:

Explanation:
The key objective of an IT governance program is to support the business, thus the identification of organizational strategies is necessary to ensure alignment between IT and corporate governance. Without identification of organizational strategies, the remaining choices-even if implemented-would be ineffective.

CISA Certified Information Systems Auditor – Question2695

Effective IT governance requires organizational structures and processes to ensure that:

A. the organization's strategies and objectives extend the IT strategy.
B. the business strategy is derived from an IT strategy.
C. IT governance is separate and distinct from the overall governance.
D. the IT strategy extends the organization's strategies and objectives.

Correct Answer: D

Explanation:

Explanation:
Effective IT governance requires that board and executive management extend governance to IT and provide the leadership, organizational structures and processes that ensure that the organization’s IT sustains and extends the organization’s strategies and objectives, and that the strategy is aligned with business strategy. Choice A is incorrect because it is the IT strategy that extends the organizational objectives, not the opposite. IT governance is not an isolated discipline; it must become an integral part of the overall enterprise governance.

CISA Certified Information Systems Auditor – Question2693

Which of the following is BEST enabled by following a configuration management process for new applications?

A. Deploying approved emergency changes to production
B. Ensuring proper testing of code before deployment
C. Managing successful implementation of acquired software
D. Maintaining adequate control over changes to production

Correct Answer: D

CISA Certified Information Systems Auditor – Question2689

Which of the following is an example of audit risk?

A. Audit work may be lost due to a malware attack.
B. Management may disagree with audit conclusions.
C. Sampling methods may not detect a material error.
D. Newer auditors may require additional supervision and training.

Correct Answer: C