Which of the following BEST demonstrates that an organization’s risk management practices enhance the effectiveness of internal IS audits?
A corporate risk register records and prioritizes organizational risks. Using it enables the audit department to align audit planning and coverage with the organization’s most significant risks, supporting an effective risk-based internal IS audit approach.
Community Discussion