Core Concepts of Accounting Information Systems 12th Edition by Carolyn Strand Norman, Mark Simkin

Exercise 13

In determining the scope of an IT audit, the auditor should pay most attention to:
a. Threats and risks
b. The cost of the audit
c. What the IT manager asks to be evaluated
d. Listings of standard control procedures