An IS auditor is following up on prior period items and finds management did not address an audit finding. Which of the following should be the IS auditor's NEXT course of action?
A.
Note the exception in a new report as the item was not addressed by management.
B.
Interview management to determine why the finding was not addressed.
C.
Recommend alternative solutions to address the repeat finding.
D.
Conduct a risk assessment of the repeat finding.
B. Interview management to determine why the finding was not addressed.
When an IS auditor follows up on prior period items and finds that management did not address an audit finding, the next course of action should be to interview management to determine the reasons for not addressing the finding (Option B). Understanding the underlying causes and challenges can provide insights into any obstacles that may have prevented the resolution of the issue. This information can guide the auditor in formulating appropriate recommendations or alternative solutions and in documenting the situation accurately.
I would go with A here.
This is an Audit and you are to report on findings. Conducting interviews based on last years audit would increase the scope of the audit
the answer wasnt consistent in my point of view, there had one and requires for assessing the risk but this one asked reaching the management team.
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
5b56aae
8 months, 3 weeks agoBlue15
1 year, 1 month agoBlue15
1 year, 1 month agolsiau76
1 year, 4 months agooldmagic
1 year, 6 months agostarzuu
1 year, 6 months agoEric0223
2 years ago