Certified Information Systems Auditor (CISA) — Question 1374

Which of the following is the MOST effective way for an organization to help ensure agreed-upon action plans from an IS audit will be implemented?

Answer options

• A. Ensure ownership is assigned.
• B. Test corrective actions upon completion.
• C. Ensure sufficient audit resources are allocated.
• D. Communicate audit results organization-wide.

Correct answer: A

Explanation

Assigning ownership is crucial because it designates responsibility for implementing action plans, which increases accountability. While testing corrective actions is important, it comes after ownership is established. Allocating resources and communicating results are valuable, but without ownership, action plans are less likely to be effectively executed.