Isaca Updated CISA Exam Questions and Answers by ryley

Compliance testing ensures that the organization ' s incident response processes align with established cybersecurity frameworks and policies. This methodology provides objective and reliable conclusions about the maturity of incident response capabilities.

Judgmental Sampling (Option A):Relies on subjective judgment and is less reliable.

Data Analytics Testing (Option B):Useful for identifying trends but may not assess process maturity comprehensively.

Variable Sampling (Option C):Appropriate for statistical analysis but less effective in process maturity assessments.

 If an IS auditor finds that management did not address a prior period audit finding, the next course of action should be to interview management to determine why the finding was not addressed, as this would help to understand the root cause, the impact, and the risk level of the issue. Noting the exception in a new report, recommending alternative solutions, or conducting a risk assessment are possible subsequent steps, but they should not precede interviewing management. References: CISA Review Manual (Digital Version), Chapter 1, Section 1.6