Which of the following findings should be of GREATEST concern for an IS auditor when auditing the effectiveness of a phishing simulation test administered for staff members?
A.
Security awareness training was not provided prior to the test.
B.
Staff members were not notified about the test beforehand.
C.
Staff members who failed the test did not receive follow-up education.
D.
Test results were not communicated to staff members.
While communicating test results to staff members (option D) is also important for providing feedback and promoting awareness, ensuring that staff members who failed the test receive follow-up education is crucial for addressing their vulnerabilities and improving the organization's overall security posture. Therefore, the finding that staff members who failed the test did not receive follow-up education should be of greatest concern for an IS auditor in this scenario.
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
PurpleParrot
9 months, 3 weeks agoblues_lee
10 months, 2 weeks agoRS66
1 year agoSwallows
1 year, 1 month agotakuanism
1 year, 6 months agoMohamedAbdelaal
2 years, 3 months agoDavid_Hu
2 years, 6 months agoDeeplaxmi
2 years, 9 months ago