While reviewing sensitive electronic work papers, the IS auditor noticed that they were not
encrypted. This could compromise the:
A.
audit trail of the versioning of the work papers.
B.
approval of the audit phases.
C.
access rights to the work papers.
D.
confidentiality of the work papers.
Explanation:
Encryption provides confidentiality for the electronic work papers. Audit trails, audit phase approvals
and access to the work papers do not, of themselves, affect the confidentiality but are part of the
reason for requiring encryption.