Which item would an IT auditor look for in OIMS audit reports to detect potential policy violations?

• A. Access anomalies
• B. System uptime
• C. User satisfaction ratings
• D. Training participation

Answer: (A)

In auditing OIMS for policy violations, the most relevant signal is access activity that doesn’t fit expected rules. Access anomalies point to potential breaches or policy breaches by showing unusual login patterns, logins at odd times, from unexpected locations, or attempts to reach restricted data or escalate privileges. These are concrete indicators that policies around who can access what, and when, may have been violated, and they’re precisely what an IT auditor would scrutinize in audit reports.

System uptime measures availability, not violations of policy. User satisfaction ratings reflect how users perceive the system, not whether policies are being followed. Training participation indicates whether users completed required training, which is related to compliance readiness but not direct evidence of policy violations in system activity.