But if procedures are outdated, the entire disaster recovery plan may be ineffective. This is a foundational issue, as current procedures are critical for a successful recovery and Without current procedures, any test (whether root cause analysis is performed or not) may not be valid. So, which one is the correct one - A or C?
The absence of a root cause analysis poses a greater risk as it may indicate systemic issues that need to be addressed to improve the effectiveness of the disaster recovery program. Therefore, option A is likely of greatest concern to an IS auditor reviewing a report of an unsuccessful disaster recovery test.
Answer A
while the lack of up-to-date disaster recovery procedures (option C) is a concern, addressing the root causes of the unsuccessful test (option A) takes precedence as the GREATEST concern for an IS auditor to ensure that future disaster recovery tests are successful and the organization's resilience to disruptions is strengthened.
A. A root cause analysis was not performed.
When a disaster recovery test fails, it's crucial to conduct a root cause analysis to understand why the test was unsuccessful.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
PurpleParrot
3 months, 1 week agoRS66
3 months, 1 week ago1e71ed5
3 months, 3 weeks agoSwallows
5 months, 3 weeks agoa84n
6 months, 2 weeks agoMJORGER
8 months, 3 weeks agoMJORGER
6 months, 3 weeks ago