Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Review the company policy for use of personal device and verify the BYOD program adheres.
A. Results of a risk assessment ✅ Correct. During the planning phase, auditors need to understand which risks are most significant to determine where to focus audit resources. A risk assessment identifies threats such as data leakage, unauthorized access, loss of confidentiality, or noncompliance with security policies — all critical in a BYOD environment. This is the foundational input for developing a risk-based audit plan, which ISACA explicitly prioritizes. B. Policies including BYOD acceptable use statements ⚠️ Important, but these are control documents, not inputs to plan the audit scope. You’ll review them during fieldwork to evaluate adequacy and compliance — not primarily for scoping.
Risk assessment is more complete.