Exit IIA-CHAL-QISA Qualified Info Systems Auditor CIA Challenge
Question 4 of 5
0% complete
Q4 Single choice

According to IIA guidance, which of the following is a limitation of a heat map?

  • A

    Impact cannot be represented on a heat map unless it is quantified in financial terms

  • B

    Impact and likelihood at times cannot be differentiated as to which is more important.

  • C

    A heat map cannot be used unless a risk and control matrix has been developed.

  • D

    Qualitative factors cannot be incorporated into a heat map