Câu 105: CISA: Certified Information Systems Auditor

An IS auditor is reviewing an organization's business continuity plan (BCP) following a change in organizational structure with significant impact to business processes. Which of the following findings should be the auditor's GREATEST concern?

1. A. Copies of the BCP have not been distributed to new business unit end users since the reorganization
2. B. The most recent business impact analysis (BIA) was performed two years before the reorganization — đáp án hiện tại
3. C. A test plan for the BCP has not been completed during the last two years
4. D. Key business process end users did not participate in the business impact analysis (BIA)