... Recovery Planning),5 19 530 information systems, 477–488operational practices, 488– 499 security, 499 –518 exam preparationaudit processes, 57–64business application systems, 403–4 09 business process ... book’s examples. The format of the questions is designed to simulate those of the actual testso that you can become familiar with the approach before taking the actual exam. The goal of the testing ... address the business requirements. The IS auditorsshouldA. Discuss the contract and costs with the vendor to ensure that the best deal has been obtained for the organizationB. Review the ROI...