Isaca CISA Practice Test - Questions Answers, Page 91

Hash totals are a control technique used to ensure data integrity during batch processing. A hash total is a calculated value based on the data in a batch. This value is compared to a pre-calculated hash total to confirm that all data has been processed correctly and without alteration.

Reference

ISACA CISA Review Manual (27th Edition):Hash totals are discussed within the context of batch processing controls.

Other Auditing Resources:Hash totals are a fundamental control technique discussed in various audit and information security publications.

Here's the breakdown, considering the need for DLP visibility in the cloud:

Verified Answer

C . Employ a cloud access security broker (CASB).

Very Short Explanation

CASBs are specifically designed to enhance visibility and control over cloud-based data. They can monitor data flows, enforce security policies, and often have DLP capabilities built-in, making them the ideal solution in this scenario.

Reference

ISACA Resources (Glossary):Definitions of Cloud Access Security Broker (CASB) highlight their role in cloud security and governance.

Industry Research (Gartner, etc.):Research on CASB tools emphasizes their ability to address visibility and control challenges for cloud data.

User requirements are the foundation of any successful application. Properly defining what the application needs to do and how it should serve users is critical before moving into design or development.

Project Management Methodologies (Agile, Waterfall, etc.):All major methodologies emphasize the criticality of understanding user requirements during the initial project phases.

Software Development Lifecycle (SDLC):Requirements gathering is a cornerstone of the initiation phase within the SDLC.

ISACA Resources:While not explicitly tied to a CISA document, ISACA's emphasis on governance and aligning IT with business objectives reinforces the importance of starting with clear user requirements.

IS auditors primarily provide assurance and oversight. In this context, independent reviews ensure that those responsible for the renovation project are meeting their obligations, following best practices, and managing risks appropriately.

ISACA's Code of Professional Ethics:Emphasizes the IS Auditor's duty to be independent and objective.

The Role of IS Audit:IS Auditors are not project managers but provide objective assessment and guidance regarding controls and risk mitigation within projects.

CISA Review Manual (27th Edition):May have sections discussing the role of IS auditors in infrastructure projects or similar initiatives.