Certified Information Systems Auditor (CISA) — Question 734
An IS auditor is determining the scope for an upcoming audit. Which of the following BEST enables the auditor to ensure appropriate controls are considered?
Answer options
- A. Conducting interviews with IT staff
- B. Reading recent industry journal articles
- C. Using an IT-related framework
- D. Reviewing previous audit reports
Correct answer: C
Explanation
The correct answer is C, as using an IT-related framework provides a structured approach to identifying and implementing necessary controls. While interviewing IT staff, reading articles, and reviewing past reports can offer valuable insights, they do not provide the comprehensive and systematic methodology that a framework does.