An audit is an important part of any control system.Which of the following is not a question that would typically be asked as part of an information systems audit?
A)Are there sufficient controls in the system? Which areas are not covered by controls?
B)Are the controls effective and implemented properly?
C)What is the ROI associated with system controls?
D)Are there procedures to ensure reporting and corrective actions in case of violations of controls?

Question

Quizplus · Accepted Answer

While the effectiveness of controls and the presence of reporting and corrective action procedures are important aspects of an information systems audit, ROI (return on investment) is not typically a question that would be asked. The focus is on the security, accuracy, and reliability of the system, rather than on financial gain or loss.

An Audit Is an Important Part of Any Control System