An IS auditor discovers a box of hard drives in a secured location that are overdue for physical destruction. The vendor responsible for this task was never made aware of these hard drives. Which of the following is the BEST course of action to address this issue?

A. Evaluate the corporate asset handling policy for potential gaps.

B. Examine the workflow to identify gaps in asset handling responsibilities.

C. Recommend the drives be sent to the vendor for destruction.

D. Escalate the finding to the asset owner for remediation.








 

Suggested Answer: B

Community Answer: D



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.