An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report, correction of the rest will require between six and 18 months for completion.Consequently, management has developed a detailed action plan, with anticipated completion dates, for addressing the weaknesses. Which of the following is the most appropriate course of action for the chief audit executive to take?
A. ssess the adequacy of the action plan and monitor key dates and deliverables
B. chedule a followup audit engagement to assess the status of corrective action
C. eassign information systems auditors to assist the information technology department in correcting the weaknesses
D. valuate statistics related to unplanned system outages, unauthorized access attempts, and denials of service to assess the effectiveness of corrections