Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 64

Based on test results, an IT auditor concluded that the organization would suffer unacceptable loss of data if there was a disaster at its data center. Which of the following test results would likely lead the auditor to this conclusion?

Answer options

• A. Requested backup tapes were not returned from the offsite vendor in a timely manner.
• B. Returned backup tapes from the offsite vendor contained empty spaces.
• C. Critical systems have been backed up more frequently than required.
• D. Critical system backup tapes are taken off site less frequently than required

Correct answer: D

Explanation

Option D is correct because infrequent removal of critical system backup tapes offsite increases the risk of data loss during a disaster, as recent backups may not be available. Option A suggests a delay but doesn't indicate data loss risk, while Option B indicates data issues but not a frequency concern. Option C, while good practice, does not relate to the frequency of offsite backups.