CISA Question 81

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Keyword: “MOST insight” + “single person dependencies” / “key person risk”Single person dependency = If John is out sick for 2 weeks, the payroll system dies. No backup, no cross-training.A. Reviewing vacation patterns → ISACA’s classic trick. The person who never takes vacation, or only takes 1 day at a time, is usually the one who knows everything critical. If no one else can do their job, they can’t leave. Huge red flag for segregation of duties + business continuity risk. CISA logic: “Behavior reveals control weaknesses”. Vacation analysis is cheap, objective, and brutally effective.

• Chose A1

  Important person can rarely takes more leave.so option A

• Chose D1

  While reviewing user activity logs is important, mapping processes and roles is more effective at understanding the full picture of dependencies.