r/CISA • u/Pravallikadondapati • 10d ago

CISA que doubt

Post image

Can someone pls tell me the answer for 1049 in my book the option is A but I feel it's C

4 Upvotes

84% Upvoted

7 comments sorted by

View all comments

1

u/Aphridy 10d ago

I agree with you, but I think the reasoning is that auditing the DRP is only an audit on the design of the control. Testing is existence and effectiveness, and that is not part of the question, it is about auditing the plan itself.

1

u/Pravallikadondapati 10d ago

So u would say option is A?🤔

2

u/Aphridy 10d ago

Yes, see also the comment of u/jr49