CISA Question 385

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  This justification indicates that management has planned actions that are considered adequate to address the identified issues or observations based on their relative importance. If management's planned actions are deemed sufficient by the auditor and are aligned with the severity and significance of the findings, deferring remediation testing until the next audit may be justified. It demonstrates that the organization has acknowledged the issues and has developed appropriate strategies or plans to address them.

• 1

  B. Management's planned actions are sufficient given the relative importance of the observations.