Certified Information Systems Auditor (CISA) — Question 1072

Which of the following should be of GREATEST concern to an IS auditor conducting an audit of an organization's data center?

Answer options

• A. The data centers in a high flood zone.
• B. Employees working in the data center have not been trained in the use of fire extinguishers.
• C. The data center has a wet-pipe sprinkler system.
• D. Employees working in the data center are not trained on emergency evacuation procedures.

Correct answer: D

Explanation

The greatest concern for an IS auditor is option D, as lack of training on emergency evacuation procedures can jeopardize employee safety during a disaster. While options A, B, and C are important safety considerations, they do not directly address the immediate risk to personnel during an emergency situation.