Certified Information Systems Security Professional – CISSP – Question068

Which of the following is a characteristic of an internal audit?

A.
An internal audit is typically shorter in duration than an external audit.
B. The internal audit schedule is published to the organization well in advance.
C. The internal auditor reports to the Information Technology (IT) department
D. Management is responsible for reading and acting upon the internal audit results

Correct Answer: D