CISA Question #48: Real Exam Question with Answer & Explanation

Question

An IS audit manager was temporarily tasked with supervising a project manager assigned to the organization's payroll application upgrade. Upon returning to the audit department, the audit manager has been asked to perform an audit to validate the implementation of the payroll application. The audit manager is the only one in the audit department with IT project management experience. What is the BEST course of action?

Options

• ATransfer the assignment to a different audit manager despite lack of IT project management
• BHave a senior IS auditor manage the project with the IS audit manager performing final review
• COutsource the audit to independent and qualified resources
• DManage the audit since there is no one else with the appropriate experience