Which of the following should be the IS auditor ' s PRIMARY focus when evaluating an organizations offsite storage facility?
Adequacy of physical and environmental controls
Results of business continuity plan (BCP) tests
Shared facilities
Retention policy and period
Submit