Certified Information Systems Auditor (CISA) — Question 947

Which of the following BEST supports the effectiveness of a compliance program?

Answer options

• A. Assessing and tracking all compliance audit findings
• B. Implementing a governance, risk, and compliance (GRC) tool to track compliance to regulations
• C. Monitoring which compliance regulations apply to the organization
• D. Implementing an awareness plan regarding compliance regulation requirements

Correct answer: A

Explanation

Option A is correct because assessing and tracking all compliance audit findings provides direct insights into the effectiveness of the compliance program. The other options, while beneficial, do not directly address the evaluation of audit findings, which is crucial for ensuring compliance effectiveness.