Câu 185: CISA: Certified Information Systems Auditor

When evaluating information security governance within an organization, which of the following findings should be of MOST concern to an IS auditor?

1. A. An information security governance audit was not conducted with in the past year.
2. B. Information security policies are updated annually.
3. C. The data center manager has final sign-off on security projects. — đáp án hiện tại
4. D. The information security department has difficulty filling vacancies.