Between the 2 options (a and c) the greatest concern is not testing the bcp. While option A is a significant concern, it can be addressed by updating the plan. However, even if all processes are included, without testing, the effectiveness of those processes remains uncertain.
While the absence of evidence that the BCP has been tested (option C) is also a significant concern, ensuring that critical business processes are adequately addressed within the plan is typically the GREATEST concern for an IS auditor. Therefore, it should be the primary focus when reviewing a business continuity plan.
A. Some critical business processes are not included in the BCP.
upvoted 4 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
PurpleParrot
1 month, 2 weeks agoJonnyBGood
4 months, 3 weeks agoSwallows
5 months, 1 week agocidigi
1 year, 3 months agoziutek_
1 year, 11 months agopeelu
1 year, 11 months ago