Take This CISA Certification Test! Trivia Quiz.
Settings
Being a Certified Information System Auditor requires more than having a certificate to boast of. There is a constant improvement in the techniques and strategies that the Certified Information System Auditor can use to improve a crumbling business and grow a static one. This quiz is aimed at sharpening your knowledge as a CISA.
- 1.The MAJOR consideration for an IS auditor when reviewing an organization's IT project portfolio is:
- A.
IT budget.
- B.
Existing IT environment.
- C.
Business plan.
- D.
Investment plan.
- 2.Which of the following is the MOST important element for the successful implementation of IT governance?
- A.
Implementing an IT scorecard
- B.
Identifying organisational strategies.
- C.
Performing a risk assessment
- D.
Creating a formal security policy
- 3.Effective IT governance requires organizational structures and processes to ensure that:
- A.
The organization's strategies and objectives extend the IT strategy.
- B.
The business strategy is derived from an IT strategy.
- C.
IT governance is separate and distinct from the overall governance.
- D.
The IT strategy extends the organization's strategies and objectives.
- 4.Which of the following IT governance practices best improves strategic alignment?
- A.
Management of suppliers and partner risks
- B.
A structure that facilitates the creation and sharing of business information.
- C.
Top management mediation between the imperatives of business and technology.
- D.
A knowledge base on customers, products, markets and processes is in place.
- 5.As an outcome of information security governance, strategic alignment provides:
- A.
Security requirements are driven by enterprise requirements
- B.
Institutionalized and commoditized solutions.
- C.
Baseline security following best practices.
- D.
An understanding of risk exposure.
- 6.IT governance is PRIMARILY the responsibility of the:
- A.
Chief executive officer.
- B.
Board of directors.
- C.
IT steering committee.
- D.
Audit committee
- 7.Establishing the level of acceptable risk is the responsibility of:
- A.
Senior business management.
- B.
The chief security officer.
- C.
The chief information officer.
- D.
Quality assurance management.
- 8.Effective IT governance will ensure that an IT plan is consistent with the organization's:
- A.
Audit plan.
- B.
Business plan.
- C.
Security plan.
- D.
Investment plan.
- 9.Involvement of senior management is MOST important in the development of:
- A.
IS policies.
- B.
IS procedures.
- C.
Standards and guidelines.
- D.
Strategic plans.
- 10.IS steering committee should:
- A.
Include a mix of members from different departments and staff levels.
- B.
Ensure that IS security policies and procedures have been executed properly.
- C.
Have formal terms of reference and maintain minutes of its meetings.
- D.
Be briefed about new trends and products at each meeting by a vendor.
Back to top