What would be an IS auditor's BEST course of action when an auditee is unable to close all audit recommendations by the time of the follow-up audit?
- Ensure the open issues are retained in the audit results.
- Recommend compensating controls for open issues.
- Evaluate the residual risk due to open issues.
- Terminate the follow-up because open issues are not resolved.
Reveal Solution Next Question