exam questions

Exam CISA All Questions

View all questions & answers for the CISA exam

Exam CISA topic 1 question 297 discussion

Actual exam question from Isaca's CISA
Question #: 297
Topic #: 1
[All CISA Questions]

Following an IS audit, which of the following types of risk would be MOST critical to communicate to key stakeholders?

  • A. Control
  • B. Inherent
  • C. Audit
  • D. Residual
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Selected Answer: A
According to ISACA, the MOST critical type of risk to communicate to key stakeholders following an IS audit would be: A. Control risk. Control risk refers to the risk that the organization's internal controls will fail to prevent or detect material misstatements or issues, which could impact the organization's ability to achieve its objectives. Communicating control risks to stakeholders is crucial because these risks indicate potential weaknesses in the control environment that could lead to significant operational or financial consequences. Addressing control risks helps ensure that corrective actions are taken to mitigate them effectively.
upvoted 1 times
...
analuisamoreira
6 months, 1 week ago
Selected Answer: A
A is correct. It represents an unexpected situation
upvoted 1 times
...
a84n
8 months, 1 week ago
Selected Answer: D
Answer: D Residual risk, encompasses both inherent risk (the risk without considering the effect of controls) and control risk (the risk that remains after controls are implemented). Therefore, communicating residual risk provides stakeholders with a comprehensive understanding of the actual risk exposure that the organization faces, taking into account both inherent risks and the effectiveness of controls.
upvoted 1 times
choboanon
3 months, 1 week ago
Residual risk generally always exists. The goal is to reduce residual risk, sometimes this can be eliminated, but often there is always some residual risk left. This leads me to think residual is not the most critical to report compared to other options
upvoted 1 times
...
...
Ijahbee
9 months, 2 weeks ago
Selected Answer: A
Control Risk This means the control is not operating effectively. If the control is not operating effectively there is no residual risk...
upvoted 4 times
...
blues_lee
11 months, 1 week ago
Selected Answer: D
Residual risk
upvoted 1 times
...
cidigi
1 year ago
A - Control risk. Because it means that the controls are not working effectively. Residual riks is the risk accepted and monitored by the business. So there is no big issue with it.
upvoted 1 times
cidigi
1 year ago
Changing my answer. I still believe Control risk is important. In this case, i would go with AUDIT as audit risk includes all 3 options , Auti Risk=( Control Risk+Residual Risk+Inherent Risk)
upvoted 2 times
...
...
hoho
1 year, 6 months ago
Selected Answer: D
Most on D, Residual risk
upvoted 1 times
...
007Georgeo
1 year, 8 months ago
Selected Answer: D
residual risk would be the most critical type of risk to communicate to stakeholders as it represents the risk that remains after controls have been implemented
upvoted 3 times
...
3008
1 year, 8 months ago
Selected Answer: D
d is answer
upvoted 1 times
...
peelu
2 years ago
Selected Answer: D
Residual risk
upvoted 1 times
...
Julianleehk
2 years, 2 months ago
It should be D
upvoted 1 times
...
Deeplaxmi
2 years, 3 months ago
D-Residual Risk
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago