Corrective action has been taken by an auditee immediately after the identification of a reportable
finding. The auditor should:

During an implementation review of a multiuser distributed application, an IS auditor finds minor
weaknesses in three areas-the initial setting of parameters is improperly installed, weak
passwords are being used and some vital reports are not beingchecked properly. While preparing
the audit report, the IS auditor should:

During an exit interview, in cases where there is disagreement regarding the impact of a finding,
an IS auditor should:

When preparing an audit report the IS auditor should ensure that the results are supported by:

The final decision to include a material finding in an audit report should be made by the:

A PRIMARY benefit derived from an organization employing control self-assessment (CSA)

techniques is that it:

The success of control self-assessment (CSA) highly depends on:

Which of the following is an attribute of the control self-assessment (CSA) approach?

Which of the following is the key benefit of control self-assessment (CSA)?

An IT steering committee should review information systems PRIMARILY to assess: