A CIO has asked an IS auditor to implement several security controls for an organization's IT process and
systems. The auditor should:

What is an IS auditor's BEST recommendation to management if a review of the incident management process finds multiple instances of incident tickets remaining open for an unusually long time?

An IS auditor observes that a bank's web page address is prefixed "https://". The auditor would be correct to conclude that:

Which of the following is used to evaluate biometric access controls?

An organization has begun using social media to communicate with current and potential clients. Which of the following should be of PRIMARY concern to the auditor?