Which of the following is the MOST important area of focus for an IS auditor reviewing an organization's privacy policy and practices?

The correct answer is A. Protection of customer personal information. The primary focus of an IS auditor when reviewing an organization’s privacy policy and practices is ensuring that customer personal information is adequately protected against unauthorized access, disclosure, or misuse. This directly addresses the core objective of privacy…

Submitted by kevin_r· Apr 18, 2026Protection of Information Assets

Question

Options

AProtection of customer personal information
BAlignment with global privacy standards
CDocumentation of incident management procedures
DRequirements for staff privacy awareness training

How the community answered

(31 responses)

A
71% (22)
B
19% (6)
C
6% (2)
D
3% (1)

Explanation

The primary focus of an IS auditor when reviewing an organization’s privacy policy and practices is ensuring that customer personal information is adequately protected against unauthorized access, disclosure, or misuse. This directly addresses the core objective of privacy - safeguarding individuals’ data and maintaining regulatory compliance.

Topics

#Privacy audit#Data protection#IS auditor focus#Privacy policy

Community Discussion

No community discussion yet for this question.

Full CISA Practice