Exam CISA topic 1 question 34 discussion

I disagree that it should be C. when you are planning an audit, this should be risk-based, and therefore, one should have an understanding of the business process before one can assess how critical this system is

b for bravo

From my perspective as an IS auditor, I have come to believe that the most important answer is not the cloud technology, but the business processes supported by the system.

Answer: B

first to understand the architecture

Cloud-based systems have different characteristics and risks than traditional on-premise systems. As such, auditors need a detailed understanding of the system's architecture and cloud environment.

You need to understand how the environment work before you can begin any audit in cloud environment. Architecture understanding is essential

Definitely, C. Audits evaluates conformity to policy. You can't do that without knowing what the applicable policies are.

Hemang Doshi: For effective audit planning, it is of utmost importance that the IS auditor has a thorough understanding of business process applications and controls.

I thought C is right answer

Understanding the architecture and cloud environment of the system is crucial because it provides essential insights into how the application controls are implemented and operated within the cloud-based system. The cloud environment introduces unique considerations and complexities that must be comprehended to effectively evaluate the application controls.

Application contol : the most importance is to understanding biz process Gitc:understanding- policy So. My choice:D

B. architecture and cloud environment of the system.

Answer B: architecture and cloud environment of the system Explanation: When planning an audit to assess application controls of a cloud-based system, it is most important for the IS auditor to understand the overall architecture and design of the cloud-based system. The auditor should have a clear understanding of how the system is structured and how data flows through the system, including the various components and applications involved. Chart CBT

why not B. architecture and cloud environment of the system.?

I'd go for D, but the answer could well also be C. Why does CISA set very vague questions?

C in my opinnion is the correct answear also