Exam CISA topic 1 question 1171 discussion

When reviewing the IT asset disposal process, an IS auditor should be most concerned with the data stored on the asset. Ensuring the secure and complete removal of sensitive or confidential data from decommissioned IT assets is a critical aspect of the disposal process. The primary concern for an IS auditor in the IT asset disposal process is the secure and thorough removal of data from decommissioned assets to prevent unauthorized access or data breaches.

When reviewing the IT asset disposal process, an IS (Information Systems) auditor should be MOST concerned with option A: Data stored on the assetA. Data stored on the asset: This is the most critical concern because failing to properly handle and erase data from disposed assets can lead to data breaches and security risks. It's essential that all sensitive and confidential data is securely wiped or destroyed during the disposal process to prevent unauthorized access. In summary, the primary focus of an IS auditor during the IT asset disposal process should be on ensuring that data stored on the asset is securely erased or destroyed to mitigate data security risks.

On B, Dispose concern on certain destruction

A: Data stored on asset

A. Data stored on the asset