An IS auditor learns that a web application within the audit scope has a vulnerability that could lead to the exposure of sensitive data. Which of the following should the auditor do FIRST?

A. Assess the risk and include all systems using the web application in the audit.

B. Determine the current version of the application.

C. Recommend implementing compensating controls.

D. Notify management and system business owners of the issue.








 

Suggested Answer: D

Community Answer: D



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.