ISACA CISA Certified Information Systems Auditor Exam

Access More Questions

During a review of a company's business continuity plan, an IS auditor notes that the plan has not been updated in over three years, despite significant changes in business processes and IT infrastructure. Which of the following is the GREATEST risk associated with this finding?

The plan may not comply with outdated regulatory requirements. The cost of maintaining the outdated plan is wasted. The plan may be ineffective in recovering critical operations after a disruption. New employees may not be aware of the plan's existence.

Correct Answer:

The plan may be ineffective in recovering critical operations after a disruption.

Access more questions from this quiz

Continue to ISACA CISA Certified Information Systems Auditor Exam for more practice questions and the full quiz experience.

Access More Questions