ISACA Certified Information Systems Auditor Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Compliance is critical, but not all policy reviews are driven by legal changes. Outdated policies and procedures can result in employees following undocumented or inconsistent practices

• Chose D1

  Policies and procedures must ensure compliance to laws and regulations which have greater consequences if not complied to in terms of penalties and license terminations. Practices, new systems must align to well updated policies and procedures.

• Chose D2

  When you see “not updated policy” ask yourself what’s the biggest consequence? If the answer includes laws, compliance, or regulations, that’s your winner!