Which of the following should be the auditor's NEXT course of action?

Which of the following should be the auditor’s NEXT course of action?

exams CISA V1 CISA exam 0 Comments

An IS auditor finds that firewalls are outdated and not supported by vendors .

Which of the following should be the auditor’s NEXT course of action?
A . Report the mitigating controls.
B. Report the security posture of the organization.
C. Determine the value of the firewall.
D. Determine the risk of not replacing the firewall.

Answer: D