Which of the following is MOST useful to an IS auditor performing a review of access controls for a document management system?
Which of the following is MOST useful to an IS auditor performing a review of access controls for a document management system?
For an IS auditor reviewing access controls in a document management system, the most useful resource is a system-generated list of staff and their project assignments, roles, and responsibilities (Option D). It directly supports the core objective of verifying that access is appropriately assigned and controlled, making it the best choice among the options provided.