Organizations periodically have an external entity review the controls so as to uncover any potential problems in the controls.This process is called ________.
A) information systems audit
B) risk analysis
C) information modification
D) recovery plan objective analysis
E) business continuity plan

Question

Quizplus · Accepted Answer

An information systems audit is a process of reviewing and evaluating an organization's information system controls by an external party to identify any potential problems or areas for improvement. This helps the organization to ensure that the controls are effectively managing risks and safeguarding the confidentiality, integrity, and availability of its information assets. Risk analysis is the process of identifying, assessing, and prioritizing risks to the organization, but it is not specifically focused on reviewing the controls. Information modification and recovery plan objective analysis are not commonly used terms in the context of information security or control review. Business continuity plan is a specific type of plan focused on ensuring the organization can continue to operate during and after a disruptive event, but it is not necessarily related to control review.

Organizations Periodically Have an External Entity Review the Controls So