An IS auditor discovered abnormalities in a monthly report generated from a system upgraded six months ago.
Which of the following should be the auditor’s FIRST course of action?
A . Inspect source code for proof of abnormalities
B . Perform a change management review of the system
C . Schedule an access review of the system
D . Determine the impact of abnormalities in the report
Answer: D