Q: 11
An internal auditor used a risk and control matrix to prepare a work program for testing a software
release. During the engagement planning stage, he tested the design of
the release procedure as a key control and concluded that the control was not designed well. During
the performance stage, he tested the operation of this control and
concluded that it was implemented as designed. Which of the following statements is true regarding
this scenario?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
