An IS auditor evaluating controls in a newly implemented call center would FIRST:
A preliminary operational-risk evaluation identifies the call center’s significant exposures and determines the scope and priority of subsequent control review and testing. Risk-based audit planning therefore precedes detailed assessment of manual, automated, or technical controls.
Community Discussion