An IS auditor is following up on prior period items and finds management did not address an audit finding. Which of the following should be the IS auditor's NEXT course of action?
- Note the exception in a new report as the item was not addressed by management.
- Interview management to determine why the finding was not addressed.
- Recommend alternative solutions to address the repeat finding.
- Conduct a risk assessment of the repeat finding.
Reveal Solution Next Question