Question 1

Which of the following should the IS auditor do when immediate corrective action is taken from the audit findings?

1. Exclude the findings from the final report without verifying.
2. Verify the correction, and if it's correctly closed, exclude it from the final report.
3. Utilize inclusion/exclusion call after discussion of the finding and client management.
4. Report the observation and the risk in the final report.

Question 2

The auditor should have the closure meeting with the objective of:

1. Correcting deficiencies
2. Assessing the audit staff performance
3. Discussing audit observations
4. Presenting the final audit report

Question 3

The IS auditor is responsible for proper communications of audit results to:

1. The manager of the audited company
2. Legal authorities
3. Senior management or the audit committee
4. The compliance manager

Question 4

Which is the first action taken if the department manager disagrees with the findings?

1. Test controls again to validate the findings
2. Report findings to the audit committee
3. Use third-party to confirm audit observation
4. Revalidate the supporting evidence

Question 5

The main reason for meeting with the company before formally releasing the audit report is to:

1. Obtain feedback
2. Finalize the structure of the final audit
3. Gain agreement
4. Ensure all important issues were covered

Question 6

Which of the following should an IS auditor do upon finding the DRP does not cover all the systems?

1. Postpone the audit
2. Call for an explanation from management
3. Determine the impact of the noninclusion of a critical system in the DRP
4. Continue the use of the DRP

Question 7

3 Points

The prime objective of an audit team discussing the audit findings with the auditee is to:

1. Review the audit results
2. Confirm audit finding and propose corrective action
3. Identify new controls for the audit finding
4. Finalize timeline for corrective action

Question 8

The audit team should ensure that the audit findings are supported by:

1. Audit evidence
2. The work papers of others
3. A risk assessment from the client
4. A response from the auditee management

Question 9

The best way for an IS auditor to follow up on the closure activities is to:

1. Continue to audit failed controls per the audit schedule
2. Review remediation progress
3. Conduct a review of controls post-remediation
4. Provide a remediation timeline and verify compliance

Question 10

The way to schedule a follow-up for audit findings is to:

1. Schedule the follow-up audit by referencing the closure due date
2. Schedule a follow-up as a surprise
3. Schedule a follow-up audit when incidents begin to occur
4. Schedule it ASAP