In-house personnel performing IS audits should possess which of the following knowledge and/or skills (Choose two.):

A. information systems knowledge commensurate with the scope of the IT environment in question

B. sufficient analytical skills to determine root cause of deficiencies in question

C. sufficient knowledge on secure system coding

D. sufficient knowledge on secure platform development

E. information systems knowledge commensurate outside of the scope of the IT environment in question

Explanation:

Personnel performing IT audits should have information systems knowledge commensurate with the scope of the institutions IT environment. They should also possess sufficient analytical skills to determine the root cause of deficiencies.