A.When a violation of a regulatory requirement has been identified

B.When gathering information for the fieldwork

C.When planning an audit engagement

D.When evaluating representations from the auditee

A.Restricting access to transactions using network security software

B.Implementing two-factor authentication

C.implementing role-based access at the application level

D.Using a single menu tor sensitive application transactions

A.The IS auditor provided consulting advice concerning application system best practices.

B.The IS auditor participated as a member of the application system project team, but did not have operational responsibilities.

C.The IS auditor implemented a specific control during the development of the application system.

D.The IS auditor designed an embedded audit module exclusively for auditing the application system.

A.Communicating the policy to employees

B.Maintaining current antivirus software

C.Regular scanning of hard drives

D.Logging of activity on the network

A.Logs are being collected in a separate protected host

B.Insider attacks are being controlled

C.Access to configuration files Is restricted.

D.Automated alerts are being sent when a risk is detected