CISA - EXAM 2 questions with correct answers

Q1) Which of the following is the MOST efficient and sufficiently reliable way to test the design effectiveness of a change control process? A) Interview personnel in charge of the change control process B) Perform an end-to-end walk-through of the process C) Test a sample of authorized changes D) Test a sample population of change requests Correct Answer-B) Perform an end-to-end walk-through of the process is correct. Observation is the best and most effective method to test changes to ensure that the process is effectively designed. D) Test a sample population of change requests is incorrect. Testing a sample population of changes is a test of compliance and operating effectiveness to ensure that users submitted the proper documentation/requests. It does not test the effectiveness of the design. C) Test a sample of authorized changes is incorrect. Testing changes that have been authorized may not provide sufficient