CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ41

Information System Auditing Process

An IS auditor is conducting a follow-up audit and finds that certain critical deficiencies remain unaddressed. What is the auditor's BEST course of action?

Explanation

Unaddressed critical deficiencies may leave significant risks and control weaknesses in place. The auditor should assess the impact of the unresolved deficiencies to determine their risk significance and support appropriate reporting or escalation.

Community Discussion

No comments yet. Be the first to start the discussion!