An IS auditor performing a review of an applications controls would evaluate the:

A. efficiency of the application in meeting the business processes.

B. impact of any exposures discovered.

C. business processes served by the application.

D. applications optimization.

Explanation:

An application control review involves the evaluation of the applications automated controls and an assessment of any exposures resulting from the control weaknesses. The other choices may be objectives of an application audit but are not part of an audit restricted to a review of controls.