Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
While the development methodology (option A) is also important, particularly for understanding the approach taken in the project, evaluating controls within system specifications is typically more directly relevant to the IS auditor's role in assessing security and compliance during the design phase.
B Is correct, The PRIMARY responsibility of an IS auditor during the design phase of a software development project is to evaluate the controls incorporated into the system specifications. The auditor should ensure that proper controls are included in the design to prevent, detect, and correct errors or irregularities that could adversely impact the system's integrity or the organization's operations. This includes ensuring that security, accuracy, completeness, and other control objectives are appropriately addressed in the system specifications. While the other options listed may also be relevant to the auditor's evaluation, they are not the PRIMARY responsibility during the design phase.
IT DOESNT SAY FIRST? SO OVERALL RESPONSIBILITY SHOULD BE TO REVIEW CONTROLS.