- Imagine you are an IT specialist, assisting the IT manager with an external audit. During the audit, the auditors examine a list of network accounts and ask about an employee who has an active account. However, you know that employee is no longer with the organization.
Discuss whether you would notify the auditor that this is an adverse finding or remedy the oversight without notifying the auditor. Would you consider notifying others of the situation? If so, why?