Which of the following should a general internal auditor be able to characterize as an IT-related risk?

Which of the following should a general internal auditor be able to characterize as an IT-related risk?
A . Computer servers are in a room that is accessible to all employees,
B. An IT architect avoids taking vacations and sharing his workload with coworkers,
C. Hours billed by IT developers exceed 24 hours daily.
D. Audit logs are lacking in a system that processes personal data.

View Answer

Answer: D