nerdexam
(ISC)2

CCSP · Question #251

Which of the following is not a reason for conducting audits?

The correct answer is B. User satisfaction. Audits are conducted for regulatory compliance, service quality determination, and security assurance, but not for measuring user satisfaction.

Submitted by chiamaka_o· Apr 18, 2026Legal, Risk and Compliance

Question

Which of the following is not a reason for conducting audits?

Options

  • ARegulatory compliance
  • BUser satisfaction
  • CDetermination of service quality
  • DSecurity assurance

How the community answered

(38 responses)
  • B
    92% (35)
  • C
    5% (2)
  • D
    3% (1)

Why each option

Audits are conducted for regulatory compliance, service quality determination, and security assurance, but not for measuring user satisfaction.

ARegulatory compliance

Regulatory compliance is a primary driver for audits, ensuring an organization meets legal and industry-specific requirements.

BUser satisfactionCorrect

User satisfaction is typically measured through direct feedback mechanisms like surveys, interviews, or usability studies, which are distinct from the formal verification and assessment processes involved in an audit.

CDetermination of service quality

Audits can assess the effectiveness and quality of services by reviewing processes, controls, and performance metrics.

DSecurity assurance

Security assurance is a key reason for audits, verifying that security controls are in place and effective in protecting information assets.

Concept tested: Purposes of IT audits

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#Audits#Audit objectives#Regulatory compliance#Security assurance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice