Certified Information Systems Auditor (CISA) — Question 1162

Which of the following poses the GREATEST risk to an organization related to system interfaces?

Answer options

• A. There is no process documentation for some system interfaces.
• B. Notifications of data transfers through the interfaces are not retained.
• C. Parts of the data transfer process are performed manually.
• D. There is no reliable inventory of system interfaces.

Correct answer: D

Explanation

Having no reliable inventory of system interfaces can lead to security vulnerabilities, mismanagement, and data loss, making it the greatest risk. While the other options indicate issues, such as lack of documentation or manual processes, they do not pose as severe a risk to the organization as not knowing what interfaces exist.