What is the purpose of the audit follow-up phase?

To verify that corrective actions have been implemented and are effective.

To re-audit the entire organization from scratch.

To prepare the final audit report for distribution.

To expand the audit scope to cover additional areas.

A financial services company is planning an internal audit of its payment card processing environment. The audit team has limited resources and must focus on the highest-risk areas. The company must comply with PCI DSS and internal policies. Which approach should the audit manager take during the planning phase?

Focus only on areas where past audits found minor issues to demonstrate continuous improvement.

Define the audit scope based on the PCI DSS requirements and prioritize areas with the highest residual risk.

Include all business units equally to maintain fairness and avoid perceptions of bias.

Conduct a comprehensive audit of all IT systems to ensure no area is overlooked.

An auditor is documenting evidence collected during a security audit. The evidence includes screenshots, configuration files, and interview notes. What is the most important practice for maintaining the integrity of this audit documentation?

Delete any evidence that is not directly used in the final report to reduce clutter.

Keep all evidence in the auditor's personal laptop to ensure it is not shared with unauthorized personnel.

Share the evidence with the auditee immediately to confirm its accuracy.

Ensure that all documents are version-controlled, access-controlled, and stored in a secure location to prevent unauthorized modification.

EC-CouncilAssociate C|CISO

Domain 2Objective 4

Understanding the Audit Management Process ACCISO Practice Questions (Page 10)

Part of the Information Security Controls and Audit Management domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

10concepts

Questions 46–50

46foundation · easy
What is the purpose of the audit follow-up phase?
Select an answer first
47application · medium
A financial services company is planning an internal audit of its payment card processing environment. The audit team has limited resources and must focus on the highest-risk areas. The company must comply with PCI DSS and internal policies. Which approach should the audit manager take during the planning phase?
Select an answer first
48application · medium
A new audit manager is reviewing the organization's audit management process. The manager notices that after audit reports are issued, there is no formal process for tracking whether recommendations are implemented. Which phase of the audit management process is missing?
Select an answer first
49application · medium
An auditor is documenting evidence collected during a security audit. The evidence includes screenshots, configuration files, and interview notes. What is the most important practice for maintaining the integrity of this audit documentation?
Select an answer first
50foundation · easy
Which framework is commonly used to align IT governance and management objectives with business goals, and can be used to guide audit planning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Understanding the Audit Management Process ACCISO Practice Questions (Page 10)

Questions 46–50

What is the purpose of the audit follow-up phase?

A new audit manager is reviewing the organization's audit management process. The manager notices that after audit reports are issued, there is no formal process for tracking whether recommendations are implemented. Which phase of the audit management process is missing?

An auditor is documenting evidence collected during a security audit. The evidence includes screenshots, configuration files, and interview notes. What is the most important practice for maintaining the integrity of this audit documentation?

Which framework is commonly used to align IT governance and management objectives with business goals, and can be used to guide audit planning?

Keep studying — Information Security Controls and Audit Management