Question 342:
An IS auditor is performing a follow-up audit and notes that some critical deficiencies have not been addressed. The auditor`s BEST course of action is to:
Answer options:
A. assess the impact of not addressing deficiencies. B. document management`s reasons for not addressing deficiencies. C. postpone the audit until the deficiencies are addressed. D. provide new recommendations.