While conducting a follow-up on an asset management audit, the IS auditor finds paid invoices for IT devices not recorded in the organization's inventory. Which of the following is the auditor's BEST course of action?

A. Alert both audit and operations management about the discrepancy.

B. Ask the asset management staff where the devices are.

C. Make a note of the evidence to include it in the scope of a future audit.

D. Ignore the invoices since they are not part of the follow-up.








 

Suggested Answer: A

Community Answer: A



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.