Câu 82: CISA: Certified Information Systems Auditor

Which of the following findings should be of MOST concern to an IS audit or reviewing an organization's business continuity plan (BCP)?

1. A. The plan has not been updated in several years.
2. B. The plan has not been signed by executive management.
3. C. No tabletop exercises have been conducted for the plan. — đáp án hiện tại
4. D. End users have not been trained on the latest version of the plan.