Which of the following is the MOST effective way an IS auditor could use generative AI to plan an audit of a new database storing transactional data?

Question

Options

• AIdentifying separation of duties conflicts for database data changes
• BDeveloping architecture diagrams
• CIdentifying technology-specific risk and considerations
• DSummarizing meeting transcripts from interviews with database administrators (DBAs)

• A
  11% (5)
• B
  5% (2)
• C
  82% (36)
• D
  2% (1)

Explanation

Generative AI excels at synthesizing broad knowledge about technologies, enabling it to rapidly identify technology-specific risks, common control gaps, regulatory considerations, and audit focus areas for a specific type of database. This directly informs the audit scope and risk-based planning. Identifying separation of duties conflicts (A) requires actual access control data, not generative AI knowledge synthesis. Developing architecture diagrams (B) is a documentation task that requires specific system inputs generative AI cannot verify. Summarizing meeting transcripts (D) is administratively useful but does not contribute substantively to audit risk planning - it is a secondary, low-complexity task rather than the highest-value application.

No community discussion yet for this question.