What does an IS auditor ensure by conducting a risk assessment when developing a risk-based audit strategy?
A. A. segregation of duties to mitigate risks are in place.
B. B. all the relevant vulnerabilities and threats are identified.
C. C. regularity compliance is adhered to.
D. D. business is profitable.
This question is part of CISA - Mock Test - Domain 1 (100 Questions)