Câu 179: CISA: Certified Information Systems Auditor

Which of the following findings should be of GREATEST concern for an IS auditor when auditing the effectiveness of a phishing simulation test administered for staff members?

1. A. Security awareness training was not provided prior to the test.
2. B. Staff members were not notified about the test beforehand.
3. C. Staff members who failed the test did not receive follow-up education. — đáp án hiện tại
4. D. Test results were not communicated to staff members.