Which of the following is the auditor’s MOST important course of action?

During an incident management audit, an IS auditor finds that several similar incidents were logged during the audit period.

Which of the following is the auditor’s MOST important course of action?
A . Document the finding and present it to management.
B. Determine if a root cause analysis was conducted.
C. Confirm the resolution time of the incidents.
D. Validate whether all incidents have been actioned.

View Answer

Answer: B