Question

An IS auditor has been assigned to audit a newly implemented procurement application that the audit team has never reviewed before. Before defining the detailed audit scope and objectives, which activity should the auditor perform FIRST?

Accepted Answer

Perform a preliminary survey to gain an understanding of the application, its processes, and associated risks

Answer

Select a statistical sample of purchase transactions for detailed testing

Answer

Draft the audit report structure and identify the recipients of the findings

Answer

Recommend compensating controls for weaknesses in the procurement process