Which of the following is the BEST way for an IS auditor to assess the design of an automated application control?
Which of the following is the BEST way for an IS auditor to assess the design of an automated application control?
To assess the design of an automated application control, reviewing system configuration parameters and output is the best approach. This method allows the auditor to see how the system is configured to manage controls and evaluate whether these configurations align with the intended control objectives. It also provides insight into the system’s actual behavior under various scenarios, which is critical in assessing the control’s effectiveness.
To "assess the design", D seems the best answer.
They may not reflect the current state of the control or demonstrate how it is actually functioning. So better to see the parameters
By checking system configuration parameters and outputs, you can be assured that the parameters are set as per the automated design.
C. Review system configuration parameters and output.
D will be the correct answer