An IS audit report highlighting inadequate network internal controls is challenged because no serious incident has ever occurred. Which of the following actions performed during the audit would have BEST supported the findings?
The action that would have best supported the audit findings is penetration testing. By actively demonstrating that network internal controls can be breached, it provides the strongest evidence of inadequacy, directly countering the challenge that no serious incidents have occurred. This aligns with the CISA Manual’s emphasis on penetration testing as a practical, evidence-based approach to assess control effectiveness (CISA Manual, p. 514).
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
46080f2
1 month, 2 weeks agoCCNPWILL
1 day, 14 hours ago