Certified Information Systems Auditor (CISA) — Question 1201

When verifying the effectiveness of an organization’s provisioning process, which sampling technique is MOST appropriate to use?

Answer options

• A. Random sampling
• B. Judgmental sampling
• C. Stop-or-go sampling
• D. Haphazard sampling

Correct answer: A

Explanation

Random sampling is the most effective technique as it allows for a representative sample of the provisioning process, reducing bias. Judgmental sampling may introduce subjectivity, while stop-or-go and haphazard sampling are less systematic and can lead to unrepresentative results.