Question: 1
During an information security audit, an auditor discovers that the current disaster recovery plan was developed three years ago but never tested. There have been significant changes to information systems since the plan was developed. The auditor should:
Question: 2
The most effective method of reporting engagement results to management and stimulating action is to:
Question: 3
A chief audit executive agrees to conduct an engagement that will focus on customers' perceptions of the quality of the organization's products and services. Which of the following issues should be addressed first?
Question: 4
An internal auditor has a recommendation to change operations which could potentially increase profits by $50,000. The best way to sell this recommendation to management is to:
Question: 5
What decision-making approach should a facilitator initiate if a group addresses an unfamiliar situation during a control self-assessment session?