an is auditor is conducting a compliance test to determine whether controls support management policies and procedures. the test will assist an is auditor in: