An auditor is reviewing the security classifications for a group of assets and finds that many of the assets are not correctly classified. What should the auditor's NEXT step be?

Question

Options

• AImmediately notify the board of directors of the organization as to the finding
• BCorrect the classifications immediately based on the auditor's knowledge of the proper
• CDocument the missing classifications
• DIdentify the owner of the asset and induce the owner to apply a proper classification

• A
  5% (3)
• B
  12% (8)
• C
  80% (53)
• D
  3% (2)

No community discussion yet for this question.