No audit function can review everything every year. Risk-based audit planning is how you decide where limited audit hours will do the most good. ISACA's standards require the IS auditor to use an appropriate risk assessment approach when planning, and the exam consistently rewards answers that start with understanding the business and its risks before choosing tests or tools.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.