Câu 460: CISA: Certified Information Systems Auditor

An IS auditor is assigned to review the IS department's quality procedures. Upon contacting the IS manager, the auditor finds that there is an informal unwritten set of standards. Which of the following should be the auditor's NEXT action?

1. A. Finalize the audit and report the finding.
2. B. Document and test compliance with the informal standards.
3. C. Postpone the audit until IS management implements written standards.
4. D. Make recommendations to IS management as to appropriate quality standards. — đáp án hiện tại