December 16, 2021 by Admin

An IS auditor is performing a follow-up audit and notes that some critical deficiencies have not been addressed. The auditor’s BEST course of action is to:

• assess the impact of not addressing deficiencies. 
• document management’s reasons for not addressing deficiencies.
• postpone the audit until the deficiencies are addressed.
• provide new recommendations.