Câu 400: CISA: Certified Information Systems Auditor

Which of the following findings should be of GREATEST concern to an IS auditor reviewing an organization’s newly implemented online security awareness program?

1. A. Employees do not receive immediate notification of results.
2. B. Only new employees are required to attend the program. — đáp án hiện tại
3. C. The timing for program updates has not been determined.
4. D. Metrics have not been established to assess training results.