An IS auditor usually places more reliance on evidence directly collected. What is an example of such evidence?

A. Evidence collected through personal observation

B. Evidence collected through systems logs provided by the organizations security administration

C. Evidence collected through surveys collected from internal staff

D. Evidence collected through transaction reports provided by the organizations IT administration

Explanation:

An IS auditor usually places more reliance on evidence directly collected, such as through personal observation.