Which of the following should be the IS auditor’s NEXT course of action?

An IS auditor is following up on prior period items and finds management did not address an audit finding .

Which of the following should be the IS auditor’s NEXT course of action?
A . Note the exception in a new report as the item was not addressed by management.
B. Recommend alternative solutions to address the repeat finding.
C. Conduct a risk assessment of the repeat finding.
D. Interview management to determine why the finding was not addressed.

View Answer

Answer: D