Question 324:
During a follow-up audit for a finding related to change management, an IS auditor notes that one of the changes sampled was an emergency change, which follows a different process. Which of the following is the auditor`s BEST course of action?
Answer options:
A. Mark the sample as not applicable in the workpaper and move or to testing the next sample. B. Select a replacement change for testing. C. Obtain evidence that the change was approved. D. Note the sample as a deviation and leave the finding open in the audit tracking log.