CISA Certified Information Systems Auditor – Question0201

An organization was recently notified by its regulatory body of significant discrepancies in its reporting data. A preliminary investigation revealed that the discrepancies were caused by problems with the organization’s data quality. Management has directed the data quality team to enhance their program. The audit committee has asked internal audit to be advisors to the process. After the data quality team identifies the system data at fault, which of the following should internal audit recommend as the NEXT step in the process?

A.
Create business rules that validate data quality.
B. Develop an improvement plan.
C. Identify the root cause of data quality problems.
D. Identify the source data owners.

Correct Answer: A