During a follow-up audit, it was found that a complex security vulnerability of low risk...

Vendor: Isaca
Product: CISA
Update on: Jul 25, 2025
Questions: 1407

Isaca CISA Question Answer

During a follow-up audit, it was found that a complex security vulnerability of low risk was not resolved within the agreed-upon timeframe. IT has stated that the system with the identified vulnerability is being replaced and is expected to be fully functional in two months Which of the following is the BEST course of action?

Require documentation that the finding will be addressed within the new system

Schedule a meeting to discuss the issue with senior management

Perform an ad hoc audit to determine if the vulnerability has been exploited

Recommend the finding be resolved prior to implementing the new system