Câu 199: CISA: Certified Information Systems Auditor

An IS auditor is performing a follow-up audit for findings identified in an organization's user provisioning process. Which of the following is the MOST appropriate population to sample from when testing for remediation?

1. A. All users provisioned after management resolved the audit issue — đáp án hiện tại
2. B. All users who have followed user provisioning processes provided by management
3. C. All users provisioned after the final audit report was issued
4. D. All users provisioned after the finding was originally identified