When an auditee is unable to close all audit recommendations by the time of the follow-up audit, the IS auditor's best course of action is to evaluate the residual risk due to open issues. This allows the auditor to understand the remaining risks that the organization faces due to unresolved audit findings and helps management make informed decisions regarding the need for further action or accepting the residual risk.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
SBD600
Highly Voted 1 year, 6 months agoPumeza
Most Recent 1 week, 1 day ago5b56aae
6 months, 4 weeks agoCISA2021
9 months, 3 weeks agoMohamedAbdelaal
1 year, 7 months agoSlurpistist
1 year, 7 months ago