Exam CISA topic 1 question 722 discussion

Actual exam question from Isaca's CISA

Question #: 722
Topic #: 1

[All CISA Questions]

Which of the following must be in place before an IS auditor initiates audit follow-up activities?

A. A management response in the final report with a committed implementation date
B. A heat map with the gaps and recommendations displayed in terms of risk
C. Supporting evidence for the gaps and recommendations mentioned in the audit report
D. Available resources for the activities included in the action plan

Show Suggested Answer

Suggested Answer: A 🗳️

by 3008 at June 4, 2023, 5:15 a.m.

Comments

Submit Cancel

Swallows

Highly Voted 1 year, 2 months ago

Selected Answer: A

Having a management response in the final report with a committed implementation date is crucial before initiating audit follow-up activities. This response indicates that the management has acknowledged the audit findings and committed to addressing them within a specified timeframe. It provides a clear plan of action for resolving the identified issues and ensures accountability. While supporting evidence for the gaps and recommendations mentioned in the audit report (option C) is also important for validating the findings, the commitment from management with a specific timeline for implementation is a foundational requirement for effective follow-up activities.

upvoted 5 times

Swallows

1 year, 1 month ago

While having available resources for the activities included in the action plan (option D) is important for executing follow-up activities, it is secondary to ensuring a management response with a committed implementation date. Without a clear commitment and timeline from management, follow-up activities lack the necessary direction and accountability needed to verify the resolution of audit findings. Therefore, option A is the critical requirement that must be in place before an IS auditor initiates audit follow-up activities—to have a management response in the final report with a committed implementation date.

upvoted 2 times

...

maxson69

Most Recent 1 month, 3 weeks ago

Selected Answer: A

Option A because it enables the IS auditor to track remediation progress and determine the appropriate timing and scope of follow-up activities.

upvoted 1 times

...

RS66

1 year ago

Selected Answer: A

A. A management response in the final report with a committed implementation date

upvoted 3 times

...

3008

2 years, 2 months ago

Selected Answer: C

c is answer

upvoted 2 times

ChaBum

1 year, 5 months ago

C doesn't make any sense Supporting evidence for the gaps are listed in the audit report, that how the auditor was able to build the report. Recommendations are also mentioned in the report, based on the evidence the auditor has gather to demonstrate the gaps.

upvoted 2 times

...

3008

2 years ago

a is correct

upvoted 3 times

...