Câu 68: CISA: Certified Information Systems Auditor

During an IT governance audit, an IS auditor notes that IT policies and procedures are not regularly reviewed and updated. The GREATEST concern to the IS auditor is that policies and procedures might not:

1. A. reflect current practices.
2. B. be subject to adequate quality assurance (QA).
3. C. include new systems and corresponding process changes.
4. D. incorporate changes to relevant laws. — đáp án hiện tại