A data analytics team has developed a process automation bot for internal audit that scans user access to all servers in the environment and then randomly selects a sample of new users for testing. Which of the following presents the GREATEST concern with this approach?
The greatest concern with the process automation bot is that evidence of population completeness is not maintained. Without this evidence, there's no assurance that the bot's sample accurately represents the entire population of new users. This fundamental issue undermines the validity and reliability of the audit results, as it is critical to ensure that the entire population is complete and accurately represented to detect all potential risk areas or user access issues.
Not clear on this one
Terrible question. I didn't get it either. There is no contex explanation. Again you should assume things
The correct answer is C : By randomly selecting a sample of new users based solely on user access to all servers in the environment, the bot may not be capturing all relevant data for the audit. This may result in a biased sample that does not accurately represent the entire population of new users. Without maintaining evidence of population completeness, the auditor cannot be confident that the results of the audit are representative and reliable.
The greatest concern with the described approach is that evidence of population completeness is not maintained. When the bot scans user access to all servers and randomly selects a sample of new users for testing, it may not cover all potential risk areas or user access issues. Ensuring that the entire population is complete and accurately represented is crucial for a thorough and effective audit.
While "B. Auditor judgment is removed from the process" is also a concern, automation can enhance efficiency and reduce human error in audit processes. However, ensuring the completeness and representativeness of the sampled population is fundamental to the validity and reliability of the audit findings. Therefore, maintaining evidence of population completeness is the greatest concern in this scenario.
C. Evidence of population completeness is not maintained.
where do you see the bot doesn't maintain population completeness?
user access must be reviewed for everyone not just new users. roles will chane and access rights with them