Exam CISA topic 1 question 994 discussion

The correct answer is C, Review configuration management. Configuration management is the process of managing, organizing, and controlling the changes that are made to an organization's IT systems and infrastructure. When an IS auditor is asked to investigate critical business applications that have been producing suspicious results, the first step should be to review the configuration management processes and procedures that are in place. This will help the auditor to understand how the applications are being managed and controlled, and it will provide a basis for identifying any potential issues or vulnerabilities that may have contributed to the suspicious results.

B. Evaluate incident management

the correct answer is B as critical applications are generating suspicious results. option A and C come next

By evaluating incident management first, the auditor can determine if there are any immediate actions required to address the suspicious results and prevent further impact on the business. Once the incident management process is reviewed, the auditor can proceed to investigate other relevant areas such as configuration management if necessary.

When critical business applications are producing suspicious results, the first step should be to evaluate incident management. Incident management involves the identification, reporting, and resolution of security incidents. Investigating suspicious results in critical business applications falls under the purview of incident management. By evaluating incident management first, the IS auditor can determine how the organization handles and responds to security incidents, including those related to critical applications. This involves understanding the process of detecting and responding to incidents, as well as the procedures in place for investigating and resolving issues with the applications.