According to IIA guidance, which of the following statements is true?
A) Risks in IT processes are best mitigated by individual controls.
B) The overall focus of the framework is on significant controls in all critical IT applications.
C) IT risks and related controls are operational and best identified using a bottom-up approach.
D) Control process risks are found at multiple layers of the IT environment.

Question

Quizplus · Accepted Answer

Control process risks are found at multiple layers of the IT environment, which aligns with the IIA guidance that emphasizes understanding risks at various levels to ensure comprehensive risk management.

According to IIA Guidance, Which of the Following Statements Is