CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 293


A data analytics team has developed a process automation bot for internal audit that scans user access to all servers in the environment and then randomly selects a sample of new users for testing. Which of the following presents the GREATEST concern with this approach?

Show Answer
Correct Answer: CD

The greatest concern with the process automation bot is that evidence of population completeness is not maintained. Without this evidence, there's no assurance that the bot's sample accurately represents the entire population of new users. This fundamental issue undermines the validity and reliability of the audit results, as it is critical to ensure that the entire population is complete and accurately represented to detect all potential risk areas or user access issues.

Discussion

6 comments
Sign in to comment
Wakazdave
Oct 6, 2022

Not clear on this one

analuisamoreira
Jun 27, 2024

Terrible question. I didn't get it either. There is no contex explanation. Again you should assume things

SBD600Option: C
Apr 28, 2023

The greatest concern with the described approach is that evidence of population completeness is not maintained. When the bot scans user access to all servers and randomly selects a sample of new users for testing, it may not cover all potential risk areas or user access issues. Ensuring that the entire population is complete and accurately represented is crucial for a thorough and effective audit.

007GeorgeoOption: C
May 6, 2023

The correct answer is C : By randomly selecting a sample of new users based solely on user access to all servers in the environment, the bot may not be capturing all relevant data for the audit. This may result in a biased sample that does not accurately represent the entire population of new users. Without maintaining evidence of population completeness, the auditor cannot be confident that the results of the audit are representative and reliable.

WakazdaveOption: C
Oct 6, 2022

user access must be reviewed for everyone not just new users. roles will chane and access rights with them

blues_leeOption: C
Jan 31, 2024

C. Evidence of population completeness is not maintained.

ChaBum
Mar 3, 2024

where do you see the bot doesn't maintain population completeness?

SwallowsOption: C
Jun 4, 2024

While "B. Auditor judgment is removed from the process" is also a concern, automation can enhance efficiency and reduce human error in audit processes. However, ensuring the completeness and representativeness of the sampled population is fundamental to the validity and reliability of the audit findings. Therefore, maintaining evidence of population completeness is the greatest concern in this scenario.