Answer Posted / guest

Answer: A

"The IS auditing guideline on the use of a risk assessment
in audit planning states, "

All risk assessment methodologies rely on subjective
judgments at some point in the process (e.g., for assigning
weightings to the various parameters). The IS auditor should
identify the subjective decisions required in order to use a
particular methodology and consider whether these judgments
can be made and validated to an appropriate level of accuracy."

"

purchase orders issued to vendors have been authorized as per the authorization matrix

1091

WHICH OF THE FOLLOWING IS OFTEN AN ADVANTAGE OF USING PROTOTYPING GOR DYDTEM DVELOPMENT

2841