Question 106
When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:
Question 107
An IS auditor finds that firewalls are outdated and not supported by vendors. Which of the following should be the auditor's NEXT course of action?
Question 108
Which of the following is the MOST important benefit of involving IS audit when implementing governance of enterprise IT?
Question 109
The PRIMARY benefit lo using a dry-pipe fire-suppression system rather than a wet-pipe system is that a dry-pipe system:
Question 110
Which of the following is the PRIMARY role of the IS auditor m an organization's information classification process?