ExamQuestions.com

Register
Login
Certified Information Systems Auditor Exam Questions

Isaca

Certified Information Systems Auditor

324 / 1870

Question 324:

During a follow-up audit for a finding related to change management, an IS auditor notes that one of the changes sampled was an emergency change, which follows a different process. Which of the following is the auditor`s BEST course of action? 

Answer options:

A. Mark the sample as not applicable in the workpaper and move or to testing the next sample.
B. Select a replacement change for testing.
C. Obtain evidence that the change was approved.
D. Note the sample as a deviation and leave the finding open in the audit tracking log.