During a follow-up audit, an IS auditor learns the organization implemented an automated process instead of the originally agreed upon enhancement of the manual process.

During a follow-up audit, an IS auditor learns the organization implemented an automated process instead of the originally agreed upon enhancement of the manual process.

The auditor should:
A . report the finding that recommendations were not acted upon
B . perform a cost-benefit analysis on the new process
C . verify that the new process satisfies control objectives
D . report the recommendation as implemented

View Answer

Answer: C