nerdexam
Isaca

CISA · Question #562

Which of the following should be an IS auditor's PRIMARY area of focus when auditing an organization's deployment of Internet of Things (IoT) devices?

The correct answer is D. Data protection measures within the IoT devices. The primary focus when auditing IoT deployments should be on data protection measures, as IoT devices often collect and transmit sensitive information. Ensuring proper encryption, authentication, and secure communication helps prevent data breaches and unauthorized

Submitted by suresh_in· Apr 18, 2026Protection of Information Assets

Question

Which of the following should be an IS auditor's PRIMARY area of focus when auditing an organization's deployment of Internet of Things (IoT) devices?

Options

  • AInteroperability of IoT devices with various brands and types
  • BEnergy consumption rates of the IoT devices
  • CFrequency at which the IoT devices transmit data
  • DData protection measures within the IoT devices

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    4% (2)
  • C
    2% (1)
  • D
    90% (43)

Explanation

The primary focus when auditing IoT deployments should be on data protection measures, as IoT devices often collect and transmit sensitive information. Ensuring proper encryption, authentication, and secure communication helps prevent data breaches and unauthorized

Topics

#IoT Security#Data Protection#IS Audit Focus#Security Controls

Community Discussion

No community discussion yet for this question.

Full CISA Practice