View all questions & answers for the IIA-CIA-Part3-3P exam
What would an internal auditor do to ensure that a process to mitigate risk is in place for the organization's change management process?
Develop and enforce change policies to ensure employees are continually trained.
Apply a risk-based approach and impose segregation of duties related to the change management process.
Conduct a high-level threat analysis and implement a compensating control.
Validate authorization, segregation of duties, testing of changes, and approval to move changes into production.
Submit