Which of the following should be the auditor’s FIRST course of action?

An IS auditor discovered abnormalities in a monthly report generated from a system upgraded six months ago.

Which of the following should be the auditor’s FIRST course of action?
A . Inspect source code for proof of abnormalities
B . Perform a change management review of the system
C . Schedule an access review of the system
D . Determine the impact of abnormalities in the report

View Answer

Answer: D