Exam CISA topic 1 question 749 discussion

You said: Control self-assessment (CSA) allows organizations to assess their own internal controls, processes, and risk management practices regularly, making it a proactive approach for identifying potential risks before they become major issues. It involves employees at all levels, which helps to identify emerging risks in a timely manner. B. Internal audit review: While internal audits are valuable for assessing risks and controls, they tend to be periodic and may not always catch emerging risks quickly. C. Stress testing: Stress testing is useful for identifying risks under extreme conditions but is generally more of a reactive tool rather than a proactive one for ongoing risk monitoring. D. External audit review: External audits are important for providing an independent assessment but typically happen annually and may not provide real-time identification of risk exposures. CSA is the most proactive and timely in identifying risk exposure.

C. CSA involves employees at all levels in assessing the effectiveness of controls and identifying risks within their own areas of responsibility. This proactive approach allows for the early detection and mitigation of risks, as it leverages the insights and knowledge of those who are directly involved in the processes.

Why B? Guys, IA is doing periodically, unlike CSA which is more frequent.

Stress testing is a test that evaluates how much load a system or application can withstand, and can clarify the behavior and limit points when the load increases. Stress testing can detect system performance problems and possible failures early and identify risks. In particular, it provides an opportunity to address issues before unexpected trouble or performance degradation occurs. B. Although internal audit reviews are also important, stress testing is more direct in identifying risks and evaluates the system's actual performance and response to load.

A: CSA

answer is A

I also think A- internal audit would discover faster only if its continous in nature..

I think answer should be A as CSA is done before audit review