6.4 Coordinate with Auditors and Regulators in Support of Internal and External Audit Processes ISSMP Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   What is the goal of validating remediation actions?

   • ATo identify new audit findings
   • BTo confirm the actions effectively address the audit findings
   • CTo extend the audit timeline
   • DTo reduce the audit scope
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company has received an audit finding that its access control policy is not being enforced for terminated employees. The compliance officer must formulate a response. The company has limited resources and must prioritize its remediation efforts. What is the most appropriate response?

   • AAcknowledge the finding and commit to reviewing the access control policy, but do not specify a timeline or responsible party.
   • BDevelop a corrective action plan that includes immediate termination of access for all terminated employees, with a timeline of 30 days, and assign responsibility to the HR department.
   • CRequest an extension from the auditors to allow more time to develop a comprehensive response.
   • DDispute the finding, stating that the company has a process in place for terminating access, and provide evidence of the process.
   Reveal Solution Discussion Select an answer first