Auditing the Effectiveness of Virus Protection

B.

When auditing the effectiveness of virus protection, an IS auditor should verify the currency of software patch application.

Explanation:

A virus protection system is designed to detect, prevent, and remove viruses, malware, and other types of malicious software from computer systems. To ensure the effectiveness of virus protection, the system must be up-to-date with the latest patches, as new viruses and malware are constantly being developed. Therefore, an IS auditor should verify the currency of software patch application.

The other options provided in the answers are not directly related to the effectiveness of virus protection.

• Frequency of IDS log reviews: This is related to intrusion detection systems (IDS), which are designed to detect unauthorized access to computer systems. While important, it is not directly related to virus protection.

• Schedule for migration to production: This is related to software development and implementation, and is not directly related to virus protection.

• Frequency of external Internet access: This is related to network security and access controls, but it is not directly related to virus protection.