While executing follow-up activities, an IS auditor is concerned that management has implemented corrective actions that are different from those originally discussed and agreed with the audit function.

While executing follow-up activities, an IS auditor is concerned that management has implemented corrective actions that are different from those originally discussed and agreed with the audit function.

In order to resolve the situation, the IS auditor’s BEST course of action would be to:
A . re-prioritize the original issue as high risk and escalate to senior management.
B. schedule a follow-up audit in the next audit cycle.
C. postpone follow-up activities and escalate the alternative controls to senior audit management.
D. determine whether the alternative controls sufficiently mitigate the risk.

View Answer

Answer: D