CISA Certified Information Systems Auditor – Question1953

During audit follow-up, an IS auditor finds that a control has been implemented differently than recommended. The auditor should:

A.
verify whether the control objectives are adequately addressed.
B. compare the control to the action plan.
C. report as a repeat finding.
D. inform management about incorrect implementation.

Correct Answer: B