CCSP Exam QuestionsBrowse all questions from this exam

CCSP Exam - Question 119


Which of the following is NOT a focus or consideration of an internal audit?

Show Answer
Correct Answer: A

Internal audits are primarily concerned with evaluating the effectiveness and efficiency of operations, the reliability of financial reporting, and compliance with applicable laws and regulations. Certification, on the other hand, is typically achieved through independent external audits. While internal audits may test certain controls as part of their process, they do not result in official certification. Therefore, certification is not a primary focus or consideration of an internal audit.

Discussion

11 comments
Sign in to comment
kjjcraigskelOption: C
Oct 14, 2020

Costs is a focus of audit? disagree.

axman832005
Feb 28, 2022

I’m with ya, internal audit is ur own department.. why would cost matter

CptSweatbread
Aug 3, 2022

A financial audit performed by the internal audit team with look at costs/budget line items

Treebeard88
Jan 8, 2024

Costs are the number one limitation for any company. They won’t waste money just for the fun of it whether it’s internal or external. If it’s an internal audit you aren’t attempting to achieve any accreditation or certification so for me it would be certification.

Zeezee2Option: A
Nov 20, 2021

Speaking from experience doing security audits at clients, internal audits do NOT result in an official certification of any kind. See it as a way of 1) finding gaps and fixing them by a certain date by which an external audit will actually perform the audit and provide certification.

Zeezee2
Nov 20, 2021

And to add to this, everything has costs to it. Internal audit = blocking personnel from doing their day to day to answer to questions, to go through documentation, have people involved internally who actually do the audit, sometimes aided by consulting firms who work from an internal audit perspective as well... All these things cost $$€€

Q2
Nov 15, 2020

Me too. Anyone else want to chime in?

Sa007788Option: C
Jan 26, 2021

internal audit may be the first phase of certification process, before going with external auditor for certification.Internal audit is recomanded.Costs should be best answer

CISSP_WannabeOption: C
Mar 12, 2021

Agree that Costs should be the correct answer. Certification I think is a red-herring (distractor).

BanzaaaiOption: C
Sep 24, 2021

C, costs out of audit scope

carls233Option: A
Oct 7, 2021

Answer looks correct to me, note the word 'internal' got to be A

Eric0223Option: A
Oct 6, 2022

The CCSP offical guide mentioned that internal audit covers cost, design, performance...while external covers some sort of the efficiency of control implementation.

LenellOption: A
Dec 28, 2022

Because external audits does not take on the role of a "trusted advisor" but more of a regulator with punitive capability, I see "A" as the BEST answer.

kepalonOption: A
Mar 24, 2022

Certification,

globy118Option: D
Jun 20, 2024

in my work, i don't think Internet audit focus on operation efficiency, our SOP will increase after their audit every time, our workload increases as well