Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The "Management vs. Audit" Rule • Management's Role: It is the Project Manager’s or Project Steering Committee's job to monitor risks throughout the life of a project. They must watch the risks daily and adjust the project plan (e.g., adding resources or changing timelines) to keep it on track. • The Auditor's Role: The auditor performs a review or evaluation (Option C) to ensure that management is actually monitoring the risks correctly
Monitoring risk is project manager and steering committee responsibility, auditor is tasked with evaluation not continuous monitoring.
Auditor is not supposed to monitor anything.