While planning a review of IT governance, the IS auditor is MOST likely to:
While planning a review of IT governance, the IS auditor is MOST likely to:
While planning a review of IT governance, the IS auditor is most likely to obtain information about the framework of control adopted by management. This is because understanding the framework helps the auditor gain insights into how IT governance is structured within the organization, including policies, procedures, and standards established by management. This foundational knowledge is crucial for identifying areas of risk and establishing the scope and objectives of the audit, ensuring effective and comprehensive review of the IT governance.
D IS THE ONE
I will go withe D
Tricky question as it says planning a review not performing the actual review, so answer is A. The other options will be more suited to performing review of the IT governance within an organization
The most important factor for the IS auditor to consider while planning a review of IT governance is obtaining information about the framework of control adopted by management. This is because the framework of control provides the structure for managing risks and ensuring that controls are in place to meet the organization's objectives. The other options may be relevant considerations, but they are not as crucial as understanding the framework of control that is in place.
you give D as an answer, and yet the justification is for A.
The correct is :B (checked in another website)
When you are planning to review a process or a department, you should go first to review related laws, policies or procedures, and then go to other things.
A for me. Keyword 'planning'
should be B
Q: While planning a review of IT governance... Answer: A
When planning a review of IT governance, the IS auditor is most likely to "A. obtain information about the framework of control adopted by management." Understanding the framework of control adopted by management provides insights into how IT governance is structured within the organization. This includes examining policies, procedures, and standards established by management to ensure that IT resources are used effectively, risks are managed appropriately, and organizational objectives are achieved. Assessing the framework of control allows the auditor to evaluate the effectiveness of IT governance processes and identify areas for improvement. While consistency of business process owner responsibilities (option C) is also important for effective IT governance, obtaining information about the control framework provides a broader understanding of how governance is structured and managed within the organization.