Câu 147: Isaca Certified in Risk and Information Systems Control

An internal audit report reveals that not all IT application databases have encryption in place. Which of the following information would be MOST important for assessing the risk impact?

1. A. The reason some databases have not been encrypted.
2. B. A list of unencrypted databases which contain sensitive data. — đáp án hiện tại
3. C. The cost required to enforce encryption.
4. D. The number of users who can access sensitive data.