Question

During a security audit of it processes, an is auditor found that there were no documented security procedures. What should the is auditor do?

Answer 1

Answer:

If the auditor finds that there is no security, he should immediately speak to the admins and ask for the deliverable she/she had asked for. Unless there is documented security procedures, the IT audit cannot be done. Before starting thee audit process the auditor should check all the requisites available to him to complete the audit process accurate and detailed.