Certified Information Systems Auditor (CISA) — Question 1005

When auditing IT organizational structure, which of the following findings presents the GREATEST risk to an organization?

Answer options

• A. Increase in the frequency of software upgrades
• B. Significantly higher turnover
• C. Aging staff
• D. Lack of customer satisfaction surveys

Correct answer: B

Explanation

The correct answer is B, as significantly higher turnover can lead to loss of institutional knowledge and increased training costs, which greatly impacts organizational stability. Options A and D, while potentially concerning, do not directly affect the core operations and talent retention as significantly. Option C, while it may be a concern, aging staff can also bring experience and stability, making it less risky than high turnover.