During an audit of a data center with updated technology, the auditee indicates that environmental controls are the same as those used in the previous environment. The IS auditor should FIRST • determine whether the controls are active • recommend changes to the maintenance schedule. O test selected controls. • review equipment specifications.