CISA Certified Information Systems Auditor – Question0126

When auditing a quality assurance plan, an IS auditor should be MOST concerned if the:

A.
quality assurance function is separate from the programming function.
B. SDLC is coupled with the quality assurance plan.
C. quality assurance function is periodically reviewed by internal audit.
D. scope of quality assurance activities is undefined.

Correct Answer: D