CISA · Question #265
A finance group recently implemented new technologies and processes. Which type of IS audit would provide the GREATEST level of assurance that the department's objectives have been met?
The correct answer is C. Integrated audit. An integrated audit provides the greatest level of assurance that department objectives have been met after implementing new technologies and processes by combining financial and operational controls with IS audit procedures.
Question
A finance group recently implemented new technologies and processes. Which type of IS audit would provide the GREATEST level of assurance that the department's objectives have been met?
Options
- AFinancial audit
- BPerformance audit
- CIntegrated audit
- DCyber audit
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C75% (18)
- D13% (3)
Why each option
An integrated audit provides the greatest level of assurance that department objectives have been met after implementing new technologies and processes by combining financial and operational controls with IS audit procedures.
A financial audit primarily focuses on the accuracy and fairness of financial statements and compliance with accounting principles, without deeply examining the effectiveness of underlying IT processes or new technologies.
A performance audit assesses the economy, efficiency, and effectiveness of an organization's programs or operations, which is valuable but might not specifically integrate the IT controls with financial reporting in the same comprehensive way as an integrated audit.
An integrated audit combines financial audit procedures with IS audit procedures, looking at both the business process and the underlying technology controls. This holistic approach provides the greatest level of assurance by verifying that the new technologies and processes not only function correctly but also effectively support the finance department's objectives and financial reporting, addressing both IT and business risks comprehensively.
A cyber audit (or cybersecurity audit) primarily focuses on the security posture, vulnerabilities, and controls protecting information assets from cyber threats, which is a component of the overall audit but not as broad as an integrated audit for meeting department objectives.
Concept tested: Types of IS audits and their scope
Topics
Community Discussion
No community discussion yet for this question.