The auditor discovered that two out of 15 employees of the IT Department have not received adequate information security training. What does this represent?

The correct answer is A. Audit finding. This scenario represents an "audit finding." An audit finding refers to results that indicate a deviation from the expected performance or standards. Discovering that two employees have not received the required training is an audit finding indicating noncompliance with the organ

Audit Findings Classification

Question

Options

AAudit finding
BAudit evidence
CInformation source

How the community answered

(42 responses)

A
88% (37)
B
10% (4)
C
2% (1)

Explanation

This scenario represents an "audit finding." An audit finding refers to results that indicate a deviation from the expected performance or standards. Discovering that two employees have not received the required training is an audit finding indicating noncompliance with the organization's training requirements.

Topics

#audit finding#information security training#awareness#compliance gap

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice