Certified Information Systems Auditor (CISA) — Question 1057

An IS auditor finds that communication closets requiring electronic swipe card access are missing access logs. Which of the following should be done NEXT?

Answer options

• A. Determine whether there are video cameras covering the entrances.
• B. Determine whether management approved the access policy.
• C. Determine whether anything is missing from the closets.
• D. Determine whether any access swipe cards have been lost or stolen.

Correct answer: A

Explanation

The correct answer is A because verifying the presence of video cameras can help determine if there is any monitoring of unauthorized access. Options B, C, and D do not directly address the immediate security risk posed by the lack of access logs.