An IS auditor is allocating effort within a fixed audit budget across planning, fieldwork, reporting and follow-up. Which approach to managing the engagement BEST aligns with ISACA performance standards?
- AFront-load the budget into fieldwork because the largest volume of testing occurs at that phase and reporting can be compressed to fit remaining hours.
- BDistribute the budget equally across the four phases so that no single phase consumes a disproportionate share of available hours.
- CSpend the planning hours on detailed substantive testing so that fieldwork can focus entirely on documenting and packaging the results.
- DAllocate effort based on the assessed risk and the procedures necessary to obtain sufficient appropriate evidence, adjusting the budget as the audit progresses. Correct
Why A is wrong: Compressing the reporting phase undermines clear communication of findings and severity, which is itself a performance standard requirement; effort allocation cannot follow volume alone.
Why B is wrong: Equal distribution is administratively tidy but is not risk-based; some engagements need heavier planning while others need heavier reporting, depending on subject matter complexity.
Why C is wrong: Substantive testing during planning conflates the phases and bypasses the risk assessment that drives the scope, the procedures and the evidence the auditor will rely on.
Why D is correct: ISACA performance standards require the auditor to plan and supervise the engagement so that procedures match the assessed risk and the evidence objective, with the budget reviewed and adjusted as understanding develops.