The post-audit action described is intended to verify that corrective actions address the finding, which is a:

The post-audit action described is intended to verify that corrective actions address the finding, which is a:

• A. Financial audit
• B. Compliance review
• C. Validation Audit
• D. Information security audit

Answer: (C)

The main idea is confirming that corrective actions actually address the identified finding. After actions are taken, you perform a check to ensure those actions were implemented and effectively prevent recurrence. That’s what a validation audit does: it verifies the remediation work and its effectiveness before closing the finding. It isn’t about financial statements, a broad compliance review, or information security specifically, but about validating the corrective actions and their impact. For example, if a process had a lapse, the validation audit re-checks the process and records to confirm the issue is resolved.

The main idea is confirming that corrective actions actually address the identified finding. After actions are taken, you perform a check to ensure those actions were implemented and effectively prevent recurrence. That’s what a validation audit does: it verifies the remediation work and its effectiveness before closing the finding. It isn’t about financial statements, a broad compliance review, or information security specifically, but about validating the corrective actions and their impact. For example, if a process had a lapse, the validation audit re-checks the process and records to confirm the issue is resolved.