Question 120:
An auditor is creating an audit program where the objective is to establish the adequacy of personal data privacy controls in a payroll process. Which of the following is MOST important to include?
Answer options:
A. Approval of data changes B. Audit logging of administrative user activity C. Segregation of duties controls D. User access provisioning