An IS auditor evaluating the change management process must select a sample from the change log. What is the BEST way for the auditor to confirm the change log is complete?
A.
Obtain management attestation of completeness.
B.
Take the last change from the system and trace it back to the log.
C.
Take an item from the log and trace it back to the system.
D.
Interview change management personnel about completeness.
This should be C, B just checks the most recent change whereas option C allows the auditor to check any changes giving a better sample selection into the change log.
the ISACA answer will always be B. their Q&A always has questions on this and all right answers are based on "from the system to the logs"
upvoted 2 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
PurpleParrot
3 weeks, 1 day agoblehbleh
3 weeks, 6 days agoPurpleParrot
3 weeks, 1 day ago