CISA Information System Auditing Process Practice Question
An IS auditor is preparing the audit report. According to ISACA standards, which of the following should be included in the final audit report?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Findings, recommendations, and management action plans
The final audit report should include findings, recommendations, and management's action plans to provide a complete picture and enable follow-up.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Only the audit findings
Why it's wrong here
Incorrect; the report should also include recommendations and action plans.
- ✗
Only the recommendations
Why it's wrong here
Incorrect; findings and action plans are also required.
- ✓
Findings, recommendations, and management action plans
Why this is correct
Correct; this is the standard content of an audit report.
- ✗
The audit program and procedures
Why it's wrong here
Incorrect; these are working papers, not part of the final report.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.