Which of the following should be the PRIMARY focus when communicating an IS audit issue to management?
The risk to which the organization is exposed due to the issue
The nature, extent, and timing of subsequent audit follow-up
How the issue was found and who bears responsibility
A detailed solution for resolving the issue
Submit