The use of risk assessment tools for classifying risk factors should be formalized in your IT audit effort through:

Last Updated on December 21, 2021 by InfraExam

CISA : Part 1 - 40
CISA : Part 41 - 80

The use of risk assessment tools for classifying risk factors should be formalized in your IT audit effort through:

the use of risk controls.
the use of computer assisted functions.
using computer assisted audit technology tools.
the development of written guidelines.
None of the choices.

Explanation:
A successful risk-based IT audit program could be based on an effective scoring system. In establishing a scoring system, management should consider all relevant risk factors and avoid subjectivity. Auditors should develop written guidelines on the use of risk assessment tools and risk factors and review these guidelines with the audit committee.

CISA : Part 1 - 40
CISA : Part 41 - 80

0 0 votes

Article Rating

CISA : Certified Information Systems Auditor : All Parts
CISA Part 01	CISA Part 11	CISA Part 21	CISA Part 31
CISA Part 02	CISA Part 12	CISA Part 22	CISA Part 32
CISA Part 03	CISA Part 13	CISA Part 23	CISA Part 33
CISA Part 04	CISA Part 14	CISA Part 24	CISA Part 34
CISA Part 05	CISA Part 15	CISA Part 25	CISA Part 35
CISA Part 06	CISA Part 16	CISA Part 26	CISA Part 36
CISA Part 07	CISA Part 17	CISA Part 27	CISA Part 37
CISA Part 08	CISA Part 18	CISA Part 28	CISA Part 38
CISA Part 09	CISA Part 19	CISA Part 29	CISA Part 39
CISA Part 10	CISA Part 20	CISA Part 30	CISA Part 40

CISA : Certified Information Systems Auditor : All Parts
CISA Part 41	CISA Part 51	CISA Part 61	CISA Part 71
CISA Part 42	CISA Part 52	CISA Part 62	CISA Part 72
CISA Part 43	CISA Part 53	CISA Part 63	CISA Part 73
CISA Part 44	CISA Part 54	CISA Part 64	CISA Part 74
CISA Part 45	CISA Part 55	CISA Part 65	CISA Part 75
CISA Part 46	CISA Part 56	CISA Part 66	CISA Part 76
CISA Part 47	CISA Part 57	CISA Part 67	CISA Part 77
CISA Part 48	CISA Part 58	CISA Part 68	CISA Part 78
CISA Part 49	CISA Part 59	CISA Part 69	CISA Part 79
CISA Part 50	CISA Part 60	CISA Part 70	CISA Part 80

CISA : Certified Information Systems Auditor : All Parts
CISA Part 01	CISA Part 11	CISA Part 21	CISA Part 31
CISA Part 02	CISA Part 12	CISA Part 22	CISA Part 32
CISA Part 03	CISA Part 13	CISA Part 23	CISA Part 33
CISA Part 04	CISA Part 14	CISA Part 24	CISA Part 34
CISA Part 05	CISA Part 15	CISA Part 25	CISA Part 35
CISA Part 06	CISA Part 16	CISA Part 26	CISA Part 36
CISA Part 07	CISA Part 17	CISA Part 27	CISA Part 37
CISA Part 08	CISA Part 18	CISA Part 28	CISA Part 38
CISA Part 09	CISA Part 19	CISA Part 29	CISA Part 39
CISA Part 10	CISA Part 20	CISA Part 30	CISA Part 40

CISA : Certified Information Systems Auditor : All Parts
CISA Part 41	CISA Part 51	CISA Part 61	CISA Part 71
CISA Part 42	CISA Part 52	CISA Part 62	CISA Part 72
CISA Part 43	CISA Part 53	CISA Part 63	CISA Part 73
CISA Part 44	CISA Part 54	CISA Part 64	CISA Part 74
CISA Part 45	CISA Part 55	CISA Part 65	CISA Part 75
CISA Part 46	CISA Part 56	CISA Part 66	CISA Part 76
CISA Part 47	CISA Part 57	CISA Part 67	CISA Part 77
CISA Part 48	CISA Part 58	CISA Part 68	CISA Part 78
CISA Part 49	CISA Part 59	CISA Part 69	CISA Part 79
CISA Part 50	CISA Part 60	CISA Part 70	CISA Part 80

The use of risk assessment tools for classifying risk factors should be formalized in your IT audit effort through:

You Might Also Like

Solution: From Power Query Editor, you import the table and then add a filter step to the query. Does this meet the goal?

What information is NOT collected from a Security Gateway in a CPINFO?

Disaster recovery project information research mainly includes information about who, what, and why. What is the following information background? (multiple choice)