1
Assessment And Audit
hard
You are reviewing the audit documentation of a junior assessor who tested a contingency planning control. The assessor noted that the control was 'effective' based on a tabletop exercise conducted six months ago. The system has undergone a major architecture change since then. According to CGRC assessment principles, what is the MOST significant deficiency in the assessor's conclusion?