CISA Question 60

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Reaso for thisis that residual risk is the level of risk remaining after controls have been applied. If audit issues remain unresolved, the IS auditor must assess the potential impact of these open issues on business operations, security, and compliance.

• 1

  C. Evaluate the residual risk due to open issues.

• Chose C1

  C for me