Question

A CISA is asked to evaluate the controls over an organization's automated revenue recognition system. Management wants the review to assess both the accuracy of the financial figures produced and the effectiveness of the application and general IT controls that support the system. Which type of audit engagement BEST fits this requirement?

Accepted Answer

An integrated audit that combines financial and IT control testing

Answer

A compliance audit focused on regulatory reporting requirements

Answer

An operational audit of the finance department's processes

Answer

A forensic audit to detect potential revenue fraud