exam questions

Exam CISM All Questions

View all questions & answers for the CISM exam

Exam CISM topic 1 question 848 discussion

Actual exam question from Isaca's CISM
Question #: 848
Topic #: 1
[All CISM Questions]

Which of the following MOST effectively identifies issues related to noncompliance with legal, regulatory, and contractual requirements?

  • A. Compliance maturity assessment
  • B. Compliance benchmarking data
  • C. Compliance gap analysis
  • D. Independent compliance audit
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Uncle_Lucifer
3 weeks, 5 days ago
Selected Answer: D
Audit. Gap analysis identifies current and compares it to regulatory to identify deltas and aid in decision to adhere or not, but in this case its about identifying compliance. Gap analysis id not applicable in this scenario. I would even pick internal audit, but external audit (independent) is better.
upvoted 2 times
...
SilverFox
1 month, 1 week ago
Selected Answer: D
Audit is more appropriate
upvoted 2 times
...
Marcovic00
1 month, 2 weeks ago
Selected Answer: C
to identify issues from company's prespective
upvoted 1 times
...
oluchecpoint
3 months, 3 weeks ago
Selected Answer: D
D. Independent compliance audit An independent compliance audit is the most effective method for identifying issues related to noncompliance with legal, regulatory, and contractual requirements. An independent audit is typically conducted by a third-party or internal audit team that has no vested interest in the outcome, ensuring impartiality and accuracy in the assessment. This approach provides a comprehensive and objective evaluation of an organization's compliance with various requirements and can uncover issues that may not be apparent through other methods.
upvoted 2 times
...
drewl25
4 months, 3 weeks ago
Selected Answer: C
A compliance gap analysis (option C) is the most effective method for identifying issues related to noncompliance with legal, regulatory, and contractual requirements. This process involves comparing the organization's current practices, policies, and controls against the specific requirements outlined in relevant laws, regulations, and contracts. By doing so, the organization can identify gaps or areas where its current practices do not meet the required standards.
upvoted 2 times
...
richck102
5 months, 4 weeks ago
Selected Answer: D
D. Independent compliance audit
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago