IIA-CIA-PART2 · Question #16
An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report…
The correct answer is D. Evaluate the ability of the action plan to correct the weaknesses and monitor key dates and. The most appropriate course of action for the CAE is to evaluate the robustness and feasibility of the management's action plan to address the identified weaknesses. The CAE should monitor the implementation progress, key dates, and deliverables to ensure that corrective…
Question
An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report, correction of the rest will require between 6 and 18 months for completion. Consequently, management has developed a detailed action plan, with anticipated completion dates, for addressing the weaknesses. What is the most appropriate course of action for the chief audit executive to take?
Options
- AAssess the status of corrective action during a follow-up audit engagement after the action plan
- BAssess the effectiveness of corrections by reviewing statistics related to unplanned system
- CReassign information systems auditors to assist in implementing management's action plan.
- DEvaluate the ability of the action plan to correct the weaknesses and monitor key dates and
How the community answered
(56 responses)- A29% (16)
- B5% (3)
- C13% (7)
- D54% (30)
Explanation
The most appropriate course of action for the CAE is to evaluate the robustness and feasibility of the management's action plan to address the identified weaknesses. The CAE should monitor the implementation progress, key dates, and deliverables to ensure that corrective actions are on track and will effectively mitigate the risks within the stipulated timeline.
Topics
Community Discussion
No community discussion yet for this question.