An IS auditor conducting a review of software usage and licensing discovers that numerous PCs
contain unauthorized software. Which of the following actions should the IS auditor take?

Corrective action has been taken by an auditee immediately after the identification of a reportable
finding. The auditor should:

During an implementation review of a multiuser distributed application, an IS auditor finds minor
weaknesses in three areas-the initial setting of parameters is improperly installed, weak passwords
are being used and some vital reports are not beingchecked properly. While preparing the audit
report, the IS auditor should:

During an exit interview, in cases where there is disagreement regarding the impact of a finding, an
IS auditor should:

When preparing an audit report the IS auditor should ensure that the results are supported by:

The final decision to include a material finding in an audit report should be made by the:

A PRIMARY benefit derived from an organization employing control self-assessment (CSA)
techniques is that it:

The success of control self-assessment (CSA) highly depends on:

Which of the following is an attribute of the control self-assessment (CSA) approach?

Which of the following is the key benefit of control self-assessment (CSA)?