An IS auditor has identified deficiencies within the organization's software development life cycle policies. Which of the following should be done NEXT?
While options such as escalating the situation to the lead auditor (option A) may be necessary in certain circumstances, it's generally advisable to start by communicating the observation to the auditee. This allows the organization to respond to the findings and take appropriate actions promptly.
D. Communicate the observation to the auditee.
Documenting the findings in the audit report is essential, but it should come after communicating the observations to the auditee. The auditee should have an opportunity to respond or take corrective action before the findings are formally documented.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
RS66
3 months, 1 week agoSwallows
5 months, 3 weeks agoSwallows
7 months, 2 weeks agoSwallows
7 months, 2 weeks agoMJORGER
8 months, 2 weeks agomarc4354345
8 months, 3 weeks ago