CISA Domain 1B-1 Practice Test 001

This practice test covers Domain 1 (Information Systems Auditing Process) Subdomain B-1 (Audit Project Management) from the CISA exam content outline.

These questions are inspired by the ISACA CISA exam and are designed to help you test your knowledge of information systems auditing, governance, risk management, IT operations, business resilience, and information asset protection.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the audit judgment, control evaluation, and risk-based decision-making skills tested in the CISA exam.

Note: CISA and Certified Information Systems Auditor are registered trademarks of ISACA. This content is not affiliated with or endorsed by ISACA.

To choose CISA practice tests based on specific domains and subdomains, click that link.

CISA 1B-1 Audit Project Management Practice Test 001

10 questions • Single best answer

Question 1

An audit manager at a government revenue agency is initiating an IS audit of a newly deployed tax-processing system. Before assigning staff or building a schedule, the manager wants to establish a sound foundation for the overall engagement. Which action should the audit manager take FIRST?

A. Define the audit scope and objectives based on assessed risk. B. Assign auditors according to their availability and technical skills. C. Prepare a detailed testing schedule with milestone target dates. D. Draft a standardized audit report template for the findings.

Question 2

During the initiation of an IS audit at a manufacturing firm, the auditee and the audit team disagree about which business processes fall within the engagement. Fieldwork is at risk of proceeding without a clear, agreed boundary. What is the auditor's BEST course of action?

A. Begin fieldwork on the processes both parties clearly agree on. B. Expand the scope to include all disputed processes for completeness. C. Confirm the scope, objectives, and responsibilities in a formal engagement letter. D. Escalate the disagreement to the audit committee for resolution.

Question 3

An IS audit of a commercial bank's cloud migration requires specialized knowledge of container security that no current team member possesses, and the engagement deadline is fixed by regulators. The audit manager must staff the project without compromising the depth of planned testing. Which staffing decision BEST supports audit quality?

A. Reassign the most senior generalist auditor to lead the work. B. Engage a qualified subject-matter expert to support the review. C. Narrow the scope to exclude the container security environment. D. Extend the timeline until an auditor completes relevant training.

Question 4

Midway through a healthcare provider's IS audit, the client requests that the team also review a newly deployed patient portal that was not part of the original plan. Adding the review would strain the approved budget and schedule. What should the IS auditor do FIRST?

A. Decline the request to protect the original engagement scope. B. Absorb the additional work to maintain the client relationship. C. Incorporate the requested portal review and adjust the engagement findings accordingly. D. Assess the impact on resources and timeline before agreeing to it.

Question 5

An audit manager overseeing a large ERP controls review wants to detect schedule slippage early and keep the engagement on track. Several audit phases are running in parallel across multiple sites and teams. Which project management technique provides the BEST ongoing control over audit progress?

A. Comparing actual completion against planned milestones at defined checkpoints. B. Requiring auditors to submit final workpapers only at engagement close. C. Increasing the number of auditors assigned to each location. D. Extending the reporting deadline to accommodate all phases.

Question 6

During an insurance company's IS audit, testing of user access controls is consuming far more hours than originally budgeted, threatening the agreed completion date. Several other planned audit areas still remain untested. What is the auditor's BEST course of action to keep the overall engagement on track?

A. Reduce the sample size uniformly across all planned audit areas to save time. B. Continue access-control testing until it is fully complete. C. Reassess remaining work and reallocate effort based on residual risk. D. Report only the areas completed within the original budget.

Question 7

An IS audit of a logistics firm has fallen behind schedule because several key personnel were unavailable during fieldwork, and the reporting deadline is now unrealistic. The audit committee still expects the final report next week as originally planned. What should the audit manager do FIRST?

A. Compress the remaining testing to meet the original deadline. B. Communicate the delay and a revised timeline to stakeholders promptly. C. Issue a preliminary report covering only completed procedures. D. Document the personnel unavailability as a scope limitation.

Question 8

At the start of a utility company's IS audit, the audit manager wants to ensure that every team member clearly understands their assigned procedures and individual accountability. Overlapping duties caused confusion and costly rework during a prior engagement. Which action MOST effectively addresses this concern?

A. Hold a daily status meeting to review each auditor's individual progress and workload. B. Assign the most experienced auditor to supervise the others. C. Rotate auditors across procedures to build broad familiarity. D. Define roles and responsibilities in the documented audit program.

Question 9

An IS auditor is reviewing whether an organization's internal audit function manages its engagements effectively and consistently. The reviewer must base any conclusion on reliable, verifiable evidence rather than perception. Which of the following provides the BEST evidence that audit projects are properly planned and controlled?

A. Documented audit programs linking objectives, resources, and milestones. B. A high volume of audit findings issued across recent engagements over time. C. Positive satisfaction survey results collected from audited business units. D. Consistent use of a standardized final audit report template across teams.

Question 10

An audit manager is estimating the hours required for an IS audit of a payroll application and must balance audit thoroughness against a limited budget. Documented results from several similar prior audits are available for reference. Which approach BEST supports a realistic project effort estimate?

A. Allocate an equal number of hours to each audit area under review. B. Set the budget to match the hours currently available from staff. C. Base effort estimates on risk and comparable prior engagements. D. Estimate hours only after fieldwork begins and actual effort is known.

Related Posts

Leave a Comment Cancel Reply