PrepAway - Latest Free Exam Questions & Answers

What should the IS auditor do next?

During a change control audit of a production system, an IS auditor finds that the change
management process is not formally documented and that some migration procedures failed.
What should the IS auditor do next?

PrepAway - Latest Free Exam Questions & Answers

A.
Recommend redesigning the change management process.

B.
Gain more assurance on the findings through root cause analysis.

C.
Recommend that program migration be stopped until the change process is documented.

D.
Document the finding and present it to management.

Explanation:

A change management process is critical to IT production systems. Before recommending that the
organization take any other action (e.g., stopping migrations, redesigning the change management
process), the IS auditor should gain assurance that the incidents reported are related to
deficiencies in the change management process and not caused by some process other than
change management.


Leave a Reply