December 22, 2021 by Admin

An IS auditor is reviewing the results of a business process improvement project. Which of the following should be performed FIRST?

• Evaluate control gaps between the old and the new processes.
• Develop compensating controls.
• Document the impact of control weaknesses in the process.
• Ensure that lessons learned during the change process are documented.