CCSP · Question #251
Which of the following is not a reason for conducting audits?
The correct answer is B. User satisfaction. Audits are conducted for regulatory compliance, service quality determination, and security assurance, but not for measuring user satisfaction.
Question
Which of the following is not a reason for conducting audits?
Options
- ARegulatory compliance
- BUser satisfaction
- CDetermination of service quality
- DSecurity assurance
How the community answered
(38 responses)- B92% (35)
- C5% (2)
- D3% (1)
Why each option
Audits are conducted for regulatory compliance, service quality determination, and security assurance, but not for measuring user satisfaction.
Regulatory compliance is a primary driver for audits, ensuring an organization meets legal and industry-specific requirements.
User satisfaction is typically measured through direct feedback mechanisms like surveys, interviews, or usability studies, which are distinct from the formal verification and assessment processes involved in an audit.
Audits can assess the effectiveness and quality of services by reviewing processes, controls, and performance metrics.
Security assurance is a key reason for audits, verifying that security controls are in place and effective in protecting information assets.
Concept tested: Purposes of IT audits
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.