Certified Information Systems Auditor (CISA) — Question 1328

The FIRST step in auditing a data communication system is to determine:

Answer options

• A. physical security for network equipment.
• B. business use and types of messages to be transmitted.
• C. traffic volumes and response-time criteria.
• D. the level of redundancy in the various communication paths.

Correct answer: B

Explanation

Determining the business use and types of messages to be transmitted is essential as it sets the context and requirements for the audit. The other options focus on specific aspects of the system that are important but come after understanding the primary business needs and communication requirements.