Câu 167: CISA: Certified Information Systems Auditor

Which of the following should be of GREATEST concern to an IS auditor conducting an audit of an organization that recently experienced a ransomware attack?

1. A. Antivirus software was unable to prevent the attack even though it was properly updated.
2. B. Backups were only performed within the local network. — đáp án hiện tại
3. C. The most recent security patches were not tested prior to implementation.
4. D. Employees were not trained on cybersecurity policies and procedures.