During an audit of a disaster recovery plan (DRP) for a critical business area, an IS auditor finds that not all critical systems are covered. What should the auditor do NEXT?
A.
Evaluate the impact of not covering the systems
B.
Escalate the finding to senior management
C.
Evaluate the prior year's audit results regarding critical system coverage
D.
Verify whether the systems are part of the business impact analysis (BIA)
While evaluating the impact of not covering the systems (option A) is also important, verifying their inclusion in the BIA is a more direct way to identify any discrepancies or oversights in the planning process. It helps the auditor understand the context behind the absence of these systems in the DRP and guides further actions to address the deficiencies in the planning process.
If with D. the question is obviously open as to whether the systems in question were taken into account in the business impact analysis that had already been carried out, but were then not included in the DRP for whatever reason. Only then does it make sense to use A. to complete the last, possibly incomplete, business impact analysis. So D. is the next step.
How will an Auditor just proceed to assess impact? The Auditor should first seek further evidence like the BIA conducted to ascertain the asset/Business process coverage.
The BIA identifies critical systems and their importance to the organization. By cross-referencing the systems with the BIA, the auditor can assess the significance of the gaps in coverage. Confirm first if already documented in the BIA instead of evaluating immediately.
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
starzuu
Highly Voted 1 year, 8 months agoanaluisamoreira
Most Recent 10 months agoSwallows
10 months, 3 weeks ago46080f2
10 months, 4 weeks agoecho_cert
1 year, 1 month agodan08
1 year, 2 months agomibg83
1 year, 10 months ago