Which of the following should an IS auditor verify when auditing the effectiveness of virus protection?
A . Frequency of IDS log reviews
B . Currency of software patch application
C . Schedule for migration to production
D . Frequency of external Internet access
Answer: B