Câu 34: IIA-CHAL-QISA: Qualified Info Systems Auditor CIA Challenge

During a review to verify the organization’s compliance with relevant health, safety, and environmental regulations, an internal auditor noted that waste oil was not being stored and safeguarded as required. The auditor captured evidence of this on his mobile phone. How should this evidence be handled?

1. A. The internal auditor should ensure the phone is password protected to restrict access to the evidence.
2. B. The pictures should be sent to relevant regulatory authorities as evidence of the breach.
3. C. The internal auditor should transfer the pictures to the chief audit executive to be filed as evidence. — đáp án hiện tại
4. D. The pictures should be sent to the CEO and senior management as evidence of the breach.