After completing audit work, an IS auditor should:
The reporting phase includes communicating audit findings to the auditee so that the facts can be confirmed, responses can be obtained, and corrective actions can be discussed before final reporting. ISACA guidance describes reporting as including discussions, a draft report, comments from auditees, an exit conference, and issuance of the final report.
Community Discussion