CISA Certified Information Systems Auditor – Question0391

Which of the following would provide the BEST evidence for an IS auditor to determine whether segregation of duties is in place?

A.
A review of the organizational chart
B. A review of personnel files
C. An analysis of user access requests
D. A walk-through of job functions

Correct Answer: C