ITPEC IP October 2023 Question 63
ITPEC IP October 2023 — Question 63 of 100
A system audit is an independent inspection and evaluation of an information system's controls, security, reliability, and effectiveness. The auditor gathers evidence, compares conditions with appropriate criteria, reports findings, and may make recommendations for improvement while remaining objective and independent of the audited work.
Answer (a)
Why not others:
- (b) System management operates and controls systems as an ongoing management responsibility
- (c) System design specifies architecture, components, data, interfaces, and controls before implementation
- (d) System test verifies that an implemented system meets defined requirements
Key rule: Independent evidence-based evaluation and recommendations identify an audit, not ordinary operation, design, or testing.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.