When performing a database review, an IS auditor notices that some tables in the database are
not normalized. The IS auditor should next:

A.
recommend that the database be normalized.

B.
review the conceptual data model.

C.
review the stored procedures.

D.
review the justification.

Explanation:

If the database is not normalized, the IS auditor should review the justification since, in some
situations, denormalization is recommended for performance reasons. The IS auditor should not
recommend normalizing the database until further investigation takes place. Reviewing the
conceptual data model or the stored procedures will not provide information about normalization.