Audit evidence collection: sufficiency, reliability, relevance; inquiry, observation, inspection, reperformance

Audit conclusions are only as good as the evidence behind them. ISACA's evidence standard requires the IS auditor to obtain sufficient and appropriate evidence to draw reasonable conclusions, and appropriate evidence is both reliable and relevant. Many CISA questions present several pieces of evidence and ask which is best, so you need a clear mental ranking.