A comprehensive IS audit policy should include guidelines detailing what involvement the internal audit team should have?

A. in the development and coding of major OS applications.

B. in the acquisition and maintenance of major WEB applications.

C. in the human resource management cycle of the application development project.

D. in the development, acquisition, conversion, and testing of major applications.

E. None of the choices.

Explanation:

The audit policy should include guidelines detailing what involvement internal audit will have in the development, acquisition, conversion, and testing of major applications. Such a policy must be approved by top management for it to be effective.