Exam IIA-CIA-Part2 Topic 5 Question 361 Discussion

Actual exam question for IIA's IIA-CIA-Part2 exam
Question #: 361
Topic #: 5

An internal auditor wants to determine whether employees are complying with the information security policy, which prohibits leaving sensitive information on employee desks overnight. The auditor checked a sample of 90 desks and found eight that contained sensitive information. How should this observation be reported, if the organization tolerates 4 percent noncompliance?

A. The incidents of noncompliance exceed the tolerance level and should be included in the final engagement report. B. The matter does not need to be reported, because the noncompliant findings fall within the acceptable tolerance limit. C. The incidents of noncompliance fall outside the acceptable tolerance limit and require immediate corrective action, as opposed to reporting. D. The deviations are within the acceptable tolerance limit, so the matter only needs to be reported to the information security manager.

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business