An organization is implementing a new cybersecurity policy and has established a committee to ensure stakeholder alignment across the organization's infrastructure, network, and security teams.
The head of the committee has asked the chief audit executive if the internal audit activity could play a role in these efforts. According to HA guidance, which of the following is the most appropriate response?

Question

An organization is implementing a new cybersecurity policy and has established a committee to ensure stakeholder alignment across the organization's infrastructure, network, and security teams.

The head of the committee has asked the chief audit executive if the internal audit activity could play a role in these efforts. According to HA guidance, which of the following is the most appropriate response?

Matthew Hillson · Accepted Answer

The internal audit activity may assist the committee and consult with management on the organization's responses and control activities.

Matthew Hillson · Answer

It is not appropriate for the internal audit activity to play a role because its independence must be protected.

Matthew Hillson · Answer

The internal audit activity should not participate because there are no IT auditors on staff.

Matthew Hillson · Answer

The internal audit activity is knowledgeable about risk and therefore should prioritize the organization's responses and control activities for the committee.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 419 - IIA-CIA-Part1 discussion

Suggested answer: D

0 comments