An IS auditor performing a review of an application’s controls would evaluate the:

A.
efficiency of the application in meeting the business processes.

B.
impact of any exposures discovered.

C.
business processes served by the application.

D.
application’s optimization.

Explanation:
An application control review involves the evaluation of the application’s automated controls and
an assessment of any exposures resulting from the control weaknesses. The other choices may
be objectives of an application audit but are not part of anaudit restricted to a review of controls.