Which of the following should be the PRIMARY input when designing IT controls?

Which of the following should be the PRIMARY input when designing IT controls?
A . Internal and external risk reports
B . Outcome of control self-assessments
C . Benchmark of industry standards
D . Recommendations from IT risk experts

View Answer

Answer: A