Exam CISA topic 1 question 569 discussion

B. By examining the workflow, the IS auditor can identify where the breakdown occurred that led to the hard drives not being sent for destruction. This approach helps in understanding the root cause of the issue and ensures that similar problems can be prevented in the future. Simply sending the drives for destruction (option C) addresses the immediate problem but does not resolve the underlying process gaps. Escalating the finding to the asset owner for remediation (option D) is a valid step, but it primarily addresses the immediate issue rather than preventing future occurrences.

I believe B is correct. Before making any recommendation, the IS auditor should gain a good understanding of the scope of the problem and what factors caused this incident. The IS auditor should identify whether the issue was caused by managers not following procedures, or by a problem with the workflow of the automated system or a combination of the two.

While evaluating the corporate asset handling policy for potential gaps (option A) is also important, escalating the finding to the asset owner for remediation ensures swift and direct action to address the immediate issue while also facilitating improvements to prevent recurrence.

D is correct.

D. Escalate the finding to the asset owner for remediation.