During the course of fieldwork, an internal IS auditor observes a critical vulnerability within a newly deployed application. What is the auditor's BEST course of action?
CISA study guides emphasizes that auditors must "immediately inform the auditee when any high-risk situation is discovered" (Chapter 2, Audit Process).
A critical vulnerability poses an immediate security risk and should be promptly communicated to IT management so that it can be addressed as soon as possible. The auditor's role is to report risks and ensure timely remediation, rather than waiting until the audit report is finalized.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
46080f2
1 month, 1 week agoCisagroup
1 month, 3 weeks ago