Exam CISA topic 1 question 607 discussion

A. All users provisioned after management resolved the audit issue: This option would indeed provide direct evidence that management has effectively implemented the remediation controls since it focuses on users provisioned after the specific audit issues were addressed. C. All users provisioned after the final audit report was issued: While this option captures users provisioned under the new processes, it might include instances where management had not yet fully implemented the remediation controls.

A is not advisable as there is a possibility that management did not resolve the issue, follow-up audit coverage should be after final audit report period.

When performing a follow-up audit for findings identified in an organization's user provisioning process, the most appropriate population to sample from when testing for remediation would be: A. All users provisioned after management resolved the audit issue This population includes users provisioned after the management took action to address the audit findings. Sampling from this population helps assess whether the remediation efforts have been effective and whether the user provisioning process is now in compliance with the desired controls.

All users provisioned after the final audit report was issued. This population includes all users who were provisioned after the final audit report was issued. This population is the most specific because it only includes users provisioned after the final audit report was issued, indicating that management has completed all remediation steps

C. All users provisioned after the final audit report was issued

answer is A

Shoud be A. All users provisioned after management resolved the audit issue

In my opinion should be A