Read the role in the stem
- Rule
- Read the role in the stem
- Exam
- CISA & CISM
- What it means
Who are you in the scenario: IS auditor, security manager, or management? The same situation has different right answers for each role.
- The trap answer looks like
The answer that would be right for a different role, such as management fixing a finding the auditor found.
- The winning answer looks like
The action that fits the role named in the question.
- Worked example
The same weak control could be found by an IS auditor or a security manager.
- Auditor: report it
- Security manager: assess the risk and drive remediation with the owner
Same facts, different job.