While reviewing an organization's business continuity plan (BCP), an IS auditor observes that a recently developed application is not included. The IS auditor should:

A. ensure that the criticality of the application is determined.

B. include in the audit findings that the BCP is incomplete.

C. recommend that the application be incorporated in the BCP.

D. ignore the observation as the application is not mission critical.








 

Suggested Answer: A

Community Answer: A



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.