Certified Information Systems Auditor (CISA) — Question 111

An organization has established hiring policies and procedures designed specifically to ensure network administrators are well qualified. Which type of control is in place?

Answer options

• A. Directive
• B. Detective
• C. Compensating
• D. Corrective

Correct answer: A

Explanation

The correct answer is A, Directive, as these policies guide and direct the hiring process to ensure qualified personnel. Options B, Detective, and D, Corrective, do not apply here as they pertain to monitoring and fixing issues rather than establishing hiring protocols. Option C, Compensating, refers to alternative measures taken when primary controls are not feasible, which does not align with the context of hiring standards.