An Audit Is an Important Part of Any Control System

Multiple Choice

An audit is an important part of any control system. Which of the following is not a question that would typically be asked as part of an information systems audit?

A) Are there sufficient controls in the system? Which areas are not covered by controls?
B) Are the controls implemented properly? Are the controls effective?
C) What is the cost of the controls? What is the ROI return on investment) associated with system controls?
D) Are there procedures to ensure reporting and corrective actions in case of violations of controls?