An auditor is examining an IT organization’s change control process. The auditor has determined that change advisory board (CAB) meetings take place on Tuesdays and Fridays, where planned changes are discussed and approved. The CAB does not discuss emergency changes that are not approved in advance. What opinion should the auditor reach concerning emergency changes?

🎲 Try a Random Question  |  Total Questions in Quiz: 63  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
CISA Domain 1: Information Systems Auditing Process — practice the complete quiz, review flashcards, or try a random question.


An auditor is examining an IT organization’s change control process. The auditor has determined that change advisory board (CAB) meetings take place on Tuesdays and Fridays, where planned changes are discussed and approved. The CAB does not discuss emergency changes that are not approved in advance. What opinion should the auditor reach concerning emergency changes?