Certified Information Systems Auditor (CISA) — Question 1062

Which of the following should be an IS auditor's GREATEST concern when reviewing a reciprocal disaster recovery agreement between two organizations?

Answer options

• A. Right to terminate the agreement
• B. Differences in IT policies and procedures
• C. Frequency of system testing
• D. Maintenance of hardware and software compatibility

Correct answer: D

Explanation

The maintenance of hardware and software compatibility is crucial because if the systems are not compatible during a disaster recovery scenario, it can lead to significant operational issues. While the other options are important, they do not directly impact the technical feasibility of executing the disaster recovery plan as compatibility does.