Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Third-party access to an organization's systems presents significant security and compliance risks, so testing controls related to third-party access is essential. If the original audit plan did not include testing for third-party access, it is important to adjust the audit plan to include this critical aspect, ensuring that all access controls are adequately reviewed.
AI says Option A is the most appropriate response because it directly addresses the deficiency by ensuring that testing of third-party access controls is included in the current audit scope. This action is proactive and aims to rectify the identified issue promptly. Therefore, Option A is the correct answer.
Determine whether a risk assessment is in place to plan testing of controls that regulate third-party access.