December 16, 2021 by Admin

What would be an IS auditor’s BEST course of action when a critical issue outside the audit scope is discovered on an employee workstation?

• Take no action as this issue is outside the audit scope.
• Expand the audit scope to include desktop audits.
• Include the findings with recommendations in the final report.
• Record the observation in the workpapers.