What is the best course of action when the internal audit activity does not have the knowledge necessary to perform a planned audit of the organization’s new IT data backup process?

What is the best course of action when the internal audit activity does not have the knowledge necessary to perform a planned audit of the organization’s new IT data backup process?
A . Postpone the audit engagement to a later date.
B. Recruit and hire a full-time staff auditor who is proficient in data backup processes.
C. Change the plan from an assurance engagement to a consulting engagement.
D. Provide data backup training to the engagement supervisor.

View Answer

Answer: B