Question 404:
Which of the following should an IS auditor review FIRST when evaluating a business process for auditing?
Answer options:
A. Evidence that IS-related controls are operating effectively B. Competence of the personnel performing the process C. Assignment of responsibility for process management D. Design and implementation of controls