An IS auditor interviewing a payroll clerk finds that the answers do not support job descriptions and
documented procedures. Under these circumstances, the IS auditor should:

A.
conclude that the controls are inadequate.

B.
expand the scope to include substantive testing.

C.
place greater reliance on previous audits.

D.
suspend the audit.

Explanation:
If the answers provided to an IS auditor’s questions are not confirmed by documented procedures
or job descriptions, the IS auditor should expand the scope of testing the controls and include
additional substantive tests. There is no evidence that whatever controls might exist are either
inadequate or adequate. Placing greater reliance on previous audits or suspending the audit are
inappropriate actions as they provide no current knowledge of the adequacy of the existing controls.