Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answers are: A. Aids in determining audit objectives ✅ B. Identify threats and vulnerabilities to the information system ✅ C. Provide information for evaluation of controls in audit planning ✅ ⸻ Explanation: When an auditor analyzes risk, their primary functions include: 1. Aiding in audit objectives – Understanding risk helps define the scope and objectives of the audit. 2. Identifying threats and vulnerabilities – Recognizing potential risks to information systems and processes. 3. Providing information for control evaluation – Helps plan audit procedures by highlighting where controls are needed or may fail. D. Supporting decision based on risks ❌ – Auditors inform and recommend, but do not make business decisio
Decision-making is the responsibility of management, not auditors
A,B,C The other option: D. Supporting Decision Based on Risks: While auditors do provide information that can be used to support decision-making, their primary role is not to support decisions directly but rather to provide an independent assessment of risk and controls. The information provided by auditors can be used by management and other stakeholders to make informed decisions, but supporting decision-making is more of a secondary function rather than a primary function of the auditor in risk analysis.