ISACA Certified Information Systems Auditor (CISA) ExamDomain 1: Information System Auditing ProcessEasy
An IS auditor is preparing the final audit report for a significant audit where several high-risk findings were identified. The audit committee has requested a concise summary that clearly outlines the most critical issues and their potential impact. Which of the following sections of the audit report should the IS auditor focus on for this purpose?
- AA comprehensive list of all minor operational inefficiencies observed.
- BDetailed audit procedures and methodologies used during the audit.
- CThe executive summary, emphasizing key findings, risks, and recommendations.
- DAppendices containing raw data and interview transcripts.
Show answer & explanationAnswer & explanation
Correct answer: C. The executive summary, emphasizing key findings, risks, and recommendations.
The executive summary is specifically designed to provide a high-level overview of the audit's most important aspects, including key findings, their associated risks and impacts, and the primary recommendations, tailored for senior management and audit committees who need concise, actionable information.
Why the other options are wrong
- A. Focusing on minor inefficiencies deviates from the request for 'most critical issues' and 'potential impact'.
- B. Detailed procedures are for technical understanding or re-performance, not a concise summary for the audit committee.
- D. Appendices contain supporting details, not the high-level summary requested by the audit committee.
Audit Report - Executive Summary
A concise and high-level overview of an audit report, highlighting the most significant findings, risks, and recommendations for senior management and stakeholders.
- Located at the beginning of the report.
- Focuses on strategic implications and business impact.
- Designed for quick comprehension by busy executives.
- Should be understandable without reading the full report.
Memory trick: The Executive Summary is the 'front page news' for management.