List of questions
Related questions
Question 455 - IIA-CIA-Part2 discussion
The internal audit activity needs to review the information security function but does not have the IT expertise needed for the engagement. Which of the following actions should the chief audit executive take to ensure the internal audit activity conforms with the Standards?
A.
Assign the engagement to a staff auditor and closely review his work and report.
B.
Assign the engagement to a senior auditor, who carefully researches and studies the company's IT infrastructure.
C.
Contract an external service provider auditor with the experience necessary to perform the audit.
D.
Perform the audit herself and work closely with the information security function to obtain expertise in the area.
Your answer:
0 comments
Sorted by
Leave a comment first