An IS auditor performing a review of the IS department
discovers that formal project approval procedures do not
exist. In the absence of these procedures the IS manager has
been arbitrarily approving projects that can be completed in
a short duration and referring other more complicated
projects to higher levels of management for approval. The IS
auditor should recommend as a FIRST course of action that:

A. users participate in the review and approval process.

B. formal approval procedures be adopted and documented.

C. projects be referred to appropriate levels of management
for approval.

D. the IS manager's job description be changed to include
approval authority.

• 2 Answers
• 4380 Views
• I also Faced
• E-Mail Answers