Isaca Certified Information Systems Auditor CISA Question # 245 Topic 25 Discussion
CISA Exam Topic 25 Question 245 Discussion:
Question #: 245
Topic #: 25
An IS auditor is reviewing an organization ' s business continuity plan (BCP) following a change in organizational structure with significant impact to business processes. Which of the following findings should be the auditor ' s GREATEST concern?
A.
Key business process end users did not participate in the business impact " analysis (BIA)
B.
Copies of the BCP have not been distributed to new business unit end users sjnce the reorganization
C.
A test plan for the BCP has not been completed during the last two years
A test plan for the BCP is essential to ensure that the plan is effective, updated and aligned with the current business needs and objectives. A change in organizational structure with significant impact to business processes may require a revision of the BCP and a new test plan to validate its adequacy. The lack of a test plan for the BCP for two years indicates a high risk of failure in the event ofa disaster or disruption. Therefore, this should be the auditor’s greatest concern among the given options. References:
ISACA, IT Control Objectives for Sarbanes-Oxley, 4th Edition, section 5.3.21
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit