An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator.
The most appropriate course of action for the IT auditor is to:

A. Review the system log for each of the late night shifts to determine whether any irregular actions occurred.

B. Inform senior management of the risk involved.

C. Develop a computer-assisted audit technique to detect instances of abuses of the arrangement.

D. Agree to work with the security officer on these shifts as a form of preventative control.








 

Suggested Answer: B






This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.