Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process
automation (RPA) to automate routine business tasks?
During an information security audit of a mid-sized organization, an IS auditor notes that the organization's information security policy is not
sufficient. What is the auditor's BEST recommendation for the organization?