CISA Practice Test

Which of the following would represent an acceptable test of an organization s business continuity plan?

A.

Full test of computer operations at an emergency site

B.

Paper test involving functional areas

C.

Benchmarking the plan against similar organizations

D.

Walk-through of the plan with technology suppliers

Which of the following is a key success factor for implementing IT governance?

A.

Establishing an IT governance committee

B.

Delivering IT projects within budget

C.

Embedding quality assurance processes

D.

Aligning IT and business strategies

Which of the following could an IS auditor recommend to improve the estimated resources required in system development?

A.

Prototyping

B.

Function point analysis

C.

Business areas involvement

D.

CASE tools

Which of the following is corrective control?

A.

Separating equipment development testing and production

B.

Reviewing user access rights for segregation of duties

C.

Verifying duplicate calculations in data processing

D.

Executing emergency response plans

Reviewing which of the following would be MOST helpful in assessing whether an organization s IT performance measures are comparable to other organizations in the same industry?

A.

Maturity models for IT processes

B.

Employee satisfaction surveys

C.

Key performance indicators (KPIs) for IT processes

D.

Reputable IT governance frameworks