Câu 263: CISA: Certified Information Systems Auditor

An IS auditor has been asked to investigate critical business applications that have been producing suspicious results. Which of the following should be done FIRST?

1. A. Evaluate control design
2. B. Evaluate incident management — đáp án hiện tại
3. C. Review configuration management
4. D. Review user access rights