Drag and Drop Question Select the words that best complete the sentence to describe an audit finding. Answer:

The correct answer is evaluation; evidence; criteria. Audit Finding Definition - Drag and Drop Explanation The completed sentence reads: > "An audit finding is the evaluation of evidence against criteria." This is the standard definition from audit frameworks (IIA, ISACA/CISA, ISO 19011). --- Why Each Word Goes Where It Does 1…

Audit Findings

Question

Exhibit

Answer Area

Drag items

statementobjectivesconclusionsresponsesgatheringrecommendationscriteriaevidenceevaluation

Correct arrangement

evaluation
evidence
criteria

Explanation

Audit Finding Definition - Drag and Drop Explanation

The completed sentence reads:

"An audit finding is the evaluation of evidence against criteria."

This is the standard definition from audit frameworks (IIA, ISACA/CISA, ISO 19011).

Why Each Word Goes Where It Does

1. evaluation (position 1) This is the act being described - the analytical process the auditor performs. A finding isn't a passive observation; it's the result of an active assessment. "Evaluation" captures that process. The sentence needs a noun describing what the finding is, and evaluation fits grammatically and conceptually.

2. evidence (position 2) Evidence is what the auditor collects - logs, documents, interviews, test results. It answers: "What did we observe?" It follows "evaluation of" because you evaluate something, and that something is the evidence gathered during fieldwork.

3. criteria (position 3) Criteria are the standards, policies, regulations, or benchmarks against which evidence is measured - the "what should be" vs. the evidence's "what is." A finding only exists when you compare evidence to a benchmark. It comes last because the sentence structure is: evaluate [evidence] against [criteria].

Why the Other Items Don't Fit

Item	Why it's wrong here
`conclusions`	A result of evaluation, not the evaluation itself
`recommendations`	Come after findings; they suggest remediation
`gathering`	Evidence gathering is a phase, not what a finding is
`responses`	Auditee replies to findings, not part of the definition
`objectives`	Define the audit's scope/purpose, not the finding
`statement`	Too vague; findings have a precise technical definition

Common Mistakes

Confusing conclusions with evaluation - Students think a finding is a conclusion, but technically a finding is the evaluation process that leads to conclusions.
Swapping evidence and criteria - You evaluate evidence against criteria, not criteria against evidence. The direction matters: observed fact → measured against standard.
Choosing recommendations - Recommendations are a component of an audit report but are not part of the definition of a finding itself.

Topics

#audit findings#audit terminology#evidence vs criteria

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice