CISA Certified Information Systems Auditor – Question0223

What is the FIRST step an auditor should take when beginning a follow-up audit?

A.
Review workpapers from the previous audit.
B. Gather evidence of remediation to conduct tests of controls.
C. Review previous findings and action plans.
D. Meet with the auditee to discuss remediation progress.

Correct Answer: C