An internal audit department has just completed an audit and is about to issue the final report. The audit manager wants to ensure the quality and consistency of the audit work. What should the audit manager do before the report is issued?

Rely on the audit team's experience and skip the review to save time.

Issue the report immediately to meet the deadline, then review the working papers later.

Have a senior auditor who was not involved in the audit review the working papers and draft report.

Ask the auditee to review the report and approve the findings before issuance.

Which of the following is a key step in the audit planning process?

Verifying the implementation of corrective actions

Developing an audit plan and program

Conducting interviews with key personnel

During audit execution, which activity is primarily performed?

Collecting evidence and performing tests

Defining the audit scope and objectives

Tracking the status of corrective actions

A CISO is planning an internal audit of the organization's cloud access management. The audit team has limited time and must focus on the highest-risk areas. The organization recently experienced a phishing incident that led to unauthorized access to a third-party SaaS application. Which approach should the CISO take during audit planning to best align the audit with the organization's current risk profile?

Use a standard audit checklist covering all cloud applications equally to ensure comprehensive coverage.

Expand the audit scope to include all third-party vendors to identify any similar access issues.

Defer the audit until the next quarter to allow the incident response team to complete their investigation.

Incorporate the phishing incident into the audit risk assessment and prioritize the SaaS application's access controls for testing.

An internal audit department wants to ensure the quality and consistency of its audit reports. The department has multiple auditors with different levels of experience. Which practice would best support audit quality assurance?

Rely on the most experienced auditor to review all reports without a formal process.

Implement a peer review process where another auditor reviews the draft report for accuracy and completeness before issuance.

Use a standard template but do not review the content before issuance to save time.

Allow each auditor to format their reports according to personal preference to encourage creativity.

EC-CouncilCertified Chief Information Security Officer

Domain 2Objective 4

Understanding the Audit Management Process CCISO Practice Questions (Page 12)

Part of the Information Security Controls and Audit Management domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

12concepts

Questions 56–60

56application · medium
An internal audit department has just completed an audit and is about to issue the final report. The audit manager wants to ensure the quality and consistency of the audit work. What should the audit manager do before the report is issued?
Select an answer first
57foundation · easy
Which of the following is a key step in the audit planning process?
Select an answer first
58foundation · easy
During audit execution, which activity is primarily performed?
Select an answer first
59application · medium
A CISO is planning an internal audit of the organization's cloud access management. The audit team has limited time and must focus on the highest-risk areas. The organization recently experienced a phishing incident that led to unauthorized access to a third-party SaaS application. Which approach should the CISO take during audit planning to best align the audit with the organization's current risk profile?
Select an answer first
60application · medium
An internal audit department wants to ensure the quality and consistency of its audit reports. The department has multiple auditors with different levels of experience. Which practice would best support audit quality assurance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.