CISA 試験問題 446
ISセキュリティポリシーの策定に関して、最終的な責任は誰にあるのでしょうか？
CISA 試験問題 447
組織の災害復旧計画（DRP）をレビューする情報システム監査担当者にとって、以下のうちどれが最も懸念すべき事項でしょうか？
CISA 試験問題 448
What type of approach to the development of organizational policies is often driven by risk assessment?
CISA 試験問題 449
An IS auditor reviewing database security should be MOST concerned if the database administrator (DBA):
CISA 試験問題 450
An IS auditor finds ad hoc vulnerability scanning is in place with no clear alignment to the organization's wider security threat and vulnerability management program. Which of the following would BEST enable the organization to work toward improvement in this area?