ISACA Certified Information Systems Auditor Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Answer should be B. The question asking "controls for monitoring the regulatory compliance of a third party". According to TPRM life cyccle. A → Due Diligence / Risk Assessment C → Due Diligence / Risk Assessment D → Onboarding / Requirement Communication B → Ongoing Monitoring / Compliance Finding

• 1

  I will change my answer. Answer should be D. D = regulatory requirement B = policy-related noncompliance issue

• Chose D1

  Compliance Risk is owned by the organization, and it should make sure that the third-party org adheres to it if applicable.