Certified Information Systems Auditor (CISA) — Question 2

To develop meaningful recommendations for findings, which of the following is MOST important for an IS auditor to determine and understand?

Answer options

• A. Criteria
• B. Responsible party
• C. Impact
• D. Root cause

Correct answer: D

Explanation

The correct answer is D, as understanding the root cause is essential for developing effective recommendations that address the issue at its source. Options A, B, and C are important but do not directly lead to actionable insights like identifying the root cause does.