Which of the following should an IS auditor recommend be done FIRST when an organization is planning to implement an IT compliance program?
Identify staff training needs related to compliance requirements.
Analyze historical compliance-related audit findings.
Research and purchase an industry-recognized IT compliance tool
Identify applicable laws, regulations, and standards.
Submit