An IS auditor is testing employee access to a large financial system and must select a sample from the current employee list provided by the auditee. Which of the following is the MOST reliable sample source to support this testing1?

Which of the following Is the MOST effective way for an IS auditor to evaluate whether an organization is well positioned to defend against an advanced persistent threat (APT)?

The maturity level of an organization s problem management support function is optimized when the function

A banking organization has outsourced its customer data processing facilities to an external service provider.
Which of the following roles is accountable for ensuring the security of customer data?

When determining which IS audits to conduct during the upcoming year, internal audit has received a request from management for multiple audits of the contract division due to fraud findings during the prior year Which of the following is the BEST basis for selecting the audits to be performed?