Are you studying for the CISA certification?
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Which is the most appropriate explanation of the purpose of discussion audit results with the auditee? To:
Communicate results of the audit to senior management.
Capture compensating controls to the identified risk.
Confirm the findings, and develop a course of corrective action.
Create time lines for the implementation of suggested recommendations.
Before communicating the results of an audit to senior management, the IS auditor should discuss the findings with the auditee. The goal of such a discussion is to confirm the accuracy of the findings and to develop a course of corrective action. Based on this discussion, the IS auditor will finalize the report and present the report to relevant levels of senior management. Based on discussions with senior management/the audit committee, the IS auditor may agree to develop an implementation plan for the suggested recommendations, along with the time lines. At the draft report stage, discussion with the auditee would seldom be used to identify compensating controls.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.