Q6
Single choice
While performing an audit of the human resources department, an internal auditor discovered unencrypted files containing the personal information of employees stored on a public shared drive.
According to IIA guidance, which of the following actions by the auditor would be the most appropriate?