What should the IS auditor do next?

During a change control audit of a production system, an IS auditor finds that the change management process is not formally documented and that some migration procedures failed.

What should the IS auditor do next?
A . Recommend redesigning the change management process.
B . Gain more assurance on the findings through root cause analysis.
C . Recommend that program migration be stopped until the change process is documented.
D . Document the finding and present it to management.

View Answer

Answer: B

Explanation:

Rebooting the system may result in a change in the system state and the loss of files and important evidence stored in memory. The other choices are appropriate actions for preserving evidence.