Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Explanation: As an IS auditor, the first step should always be to determine why the mandatory operational procedures were not followed. It is important to identify the root cause of the noncompliance to prevent it from happening in the future. If the noncompliance is due to a lack of training or understanding of the procedures, the auditor may recommend additional training or clarification of the procedures. If the noncompliance is due to a lack of resources or conflicting priorities, the auditor may recommend changes to the production schedule or resource allocation. In summary, the IS auditor's next step should be to determine why the mandatory operational procedures were not followed and identify the root cause before taking any further actions.
A. note the noncompliance in the audit working papers.