This responsibility of the QA function may raise concern for the IS auditor if the updates are not consistent with the organization's policies or if there is a lack of adequate testing of the new methodology. This may result in poor system performance, system vulnerabilities, or other potential risks. Therefore, the IS auditor may need to review the updated methodology and ensure that it aligns with the organization's policies and procedures.