Q53
Single choice
What should an IS auditor do FIRST when a follow-up audit reveals some management action plans have not been initiated?