An IS auditor is reviewing a medical device that is attached to a patient’s body,...

Vendor: Isaca
Product: CISA
Update on: Jul 25, 2025
Questions: 1407

Isaca CISA Question Answer

An IS auditor is reviewing a medical device that is attached to a patient’s body, which automatically takes and uploads measurements to a cloud server. Treatment may be updated based on the measurements. Which of the following should be the auditor's PRIMARY focus?

Physical access controls on the device

Security and quality certification of the device

Device identification and authentication

Confirmation that the device is regularly updated