An IS auditor finds that terminated users have access to financial applications. Which of the following is the auditor's MOST important course of action when assessing the impact?

As part of a follow-up of a previous year's audit, an IS auditor has increased the expected error rate for a sample. The impact will be:

An organization's business function wants to capture customer data and must comply with global data protection regulations. Which of the following should be considered FIRST?

For an organization that has plans to implement web-based trading, it would be MOST important for an IS auditor to verify the organization's information security plan includes:

Which of the following is the MOST effective means of helping management and the IT strategy committee to monitor IT performance?