READ Free Dumps For Isaca- CISA

Question ID 22453	The output of the risk management process is an input for making:
Option A	business plans.
Option B	audit charters.
Option C	security policy decisions.
Option D	software design decisions.
Correct Answer	C

Explanation The risk management process is about making specific, security-related decisions, such as the level of acceptable risk. Choices A, B and D are not ultimate goals of the risk management process.

Question ID 22454	An IS auditor was hired to review e-business security. The IS auditor's first task was to examine each existing e-business application looking for vulnerabilities. What would be the next task?
Option A	Report the risks to the CIO and CEO immediately
Option B	Examine e-business application in development
Option C	Identify threats and likelihood of occurrence
Option D	Check the budget available for risk management
Correct Answer	C

Explanation An IS auditor must identify the assets, look for vulnerabilities, and then identify the threats and the likelihood of occurrence. Choices A, B and D should be discussed with the CIO, and a report should be delivered to the CEO. The report should include the findings along with priorities and costs.

Previous-Page 1 2 3 4 5 6 7 8 9. . . 14 15 Next-Page

Send email to admin@getfreedumps for new dumps request!!!