An IS auditor finds that communication closets requiring electronic swipe card access are missing access logs. Which of the following should be done NEXT?
A.
Determine whether there are video cameras covering the entrances.
B.
Determine whether management approved the access policy.
C.
Determine whether anything is missing from the closets.
D.
Determine whether any access swipe cards have been lost or stolen.
I will go with A. The cameras are the only way to determine if unauthorized personnel accessed the closets. On the other hand, if you find out a card was stolen, then what? The logs are missing and you can't check if the missing cards were used. You will then need the cameras again.
D. Identifying lost or stolen cards helps assess the severity of the situation. If cards are unaccounted for, it suggests a higher risk of unauthorized access and potential theft of equipment or data.
Once the auditor determines the status of the swipe cards, they can then consider additional steps like reviewing video footage (option A) or investigating missing equipment (option C).
Video cameras covering the entrances can provide visual records of individuals entering and exiting these areas. If access logs are missing or incomplete, video footage can serve as an alternative or supplementary method to monitor who has accessed the closets.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
RS66
3 months agoBinagr8
4 months agoSwallows
4 months ago