Home › MCQs › CISA › Question #6829
Back to Questions
CISA QUESTION #6829
Question 1
During a SOX compliance audit, the auditor discovers that significant control weaknesses identified 85 days ago have not been reported to the audit committee. What is the PRIMARY compliance violation?
  • Delayed remediation
  • Failure to disclose significant weaknesses to audit committee within required 90-day period✔️
  • Inadequate control design
  • Insufficient audit frequency
Correct Answer Explanation
SOX regulations require that all significant weaknesses be disclosed to the audit committee every 90 days. At 85 days, the organization is nearing violation of this requirement. Timely disclosure to the audit committee is a specific regulatory obligation separate from remediation timelines.