Which of the following should an IS auditor verify when auditing the effectiveness of virus protection? 

Answer options:

A. Frequency of IDS log reviews
B. Currency of software patch application
C. Schedule for migration to production
D. Frequency of external Internet access

B