Câu 363: CISA: Certified Information Systems Auditor

During a vendor management database audit, an IS auditor identifies multiple instances of duplicate vendor records. In order to prevent recurrence of the same issue, which of the following is the IS auditor's BEST recommendation to management?

1. A. Run system reports of full vendor listings periodically to identify duplication
2. B. Perform system verification checks for unique data values on key fields — đáp án hiện tại
3. C. Request senior management approval of all new vendor details.
4. D. Build a segregation of duties control into the vendor creation process.