CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 49


Which of the following would provide the MOST important input during the planning phase for an audit on the implementation of a bring your own device (BYOD) program?

Show Answer
Correct Answer: A

The results of a risk assessment are the most important input during the planning phase for an audit on the implementation of a bring your own device (BYOD) program. A risk assessment identifies potential security risks and vulnerabilities associated with allowing personal devices onto the corporate network. This understanding of the level of risk involved is crucial in guiding the focus of the audit and in prioritizing the areas that need to be examined thoroughly. Without first identifying the risks, other aspects such as policies, previous audit findings, and device inventories cannot be effectively evaluated.

Discussion

9 comments
Sign in to comment
lsiau76Option: A
Aug 19, 2023

A. Results of a risk assessment During the planning phase for an audit on the implementation of a bring your own device (BYOD) program, the most important input would be the results of a risk assessment. This assessment would help identify potential security risks and vulnerabilities associated with allowing personal devices onto the corporate network. Understanding the level of risk involved guides the audit's focus and helps in prioritizing the areas that need to be examined thoroughly.

JulianleehkOption: B
Nov 26, 2022

Should be B

MunaMOption: B
Sep 8, 2022

Could the answer be B?

PakawatOption: B
May 10, 2023

B: To provide information on the policies, procedures, and guidelines.

meelaanOption: B
Sep 18, 2023

Why not B?

echo_certOption: A
Feb 22, 2024

Planning phase not audit execution phase.

SwallowsOption: B
Apr 6, 2024

What should be checked during the planning phase is whether the policy is reasonable.

Swallows
Jul 14, 2024

I'm beginning to think the answer is A. Why: Although policies, including BYOD acceptable use statements, are important, policies themselves are developed based on risk assessments, and the results of risk assessments take precedence. Policies provide implementation guidelines, but understanding the specific risks is essential to developing the right policies.

5b56aaeOption: A
Apr 19, 2024

Risk is the word for me

a84nOption: A
Apr 25, 2024

Answer: A