An organization's management has asked the internal IS auditor for input in developing a control to prevent the recurrence of a deficiency. Which of the following is the auditor's BEST course of actio

The correct answer is C. Provide only general advice to management.. To maintain independence and objectivity, the IS auditor should provide only general advice or recommendations to management when developing a control. Actively participating in control design or implementation would compromise the auditor’s impartiality for future audits of that

Submitted by stefanr· Apr 18, 2026Information System Auditing Process

Question

An organization's management has asked the internal IS auditor for input in developing a control to prevent the recurrence of a deficiency. Which of the following is the auditor's BEST course of action?

Options

AWork with management to implement the control.
BAsk the audit committee for permission before working with management.
CProvide only general advice to management.
DHave another member of the internal audit team audit the control next year.

How the community answered

(17 responses)

A
6% (1)
B
12% (2)
C
76% (13)
D
6% (1)

Explanation

To maintain independence and objectivity, the IS auditor should provide only general advice or recommendations to management when developing a control. Actively participating in control design or implementation would compromise the auditor’s impartiality for future audits of that

Topics

#Auditor Independence#Auditor Objectivity#Internal Audit Role#Professional Ethics

Community Discussion

No community discussion yet for this question.

Full CISA Practice