During a change control audit of a production system, an IS auditor finds that the change management process is not formally documented and that some migration procedures failed. What should the IS auditor do next?

During the collection of forensic evidence, which of the following actions would MOST likely result in the destruction or corruption of evidence on a compromised system?

An IS auditor who was involved in designing an organization-s business continuity plan(BCP) has been assigned to audit the plan. The IS auditor should:

An IS auditor conducting a review of software usage and licensing discovers that numerous PCs contain unauthorized software. Which of the following actions should the IS auditor take?

Corrective action has been taken by an auditee immediately after the identification of a reportable finding. The auditor should:

During an implementation review of a multiuser distributed application, an IS auditor finds minor weaknesses in three areas-the initial setting of parameters is improperly installed, weak passwords are being used and some vital reports are not being checked properly. While preparing the audit report, the IS auditor should:

During an exit interview, in cases where there is disagreement regarding the impact of a finding, an IS auditor should:

When preparing an audit report, the IS auditor should ensure that the results are supported by:

The final decision to include a material finding in an audit report should be made by the:

The success of control self-assessment (CSA) highly depends on: