Certified Information Systems Auditor (CISA) — Question 1226

Which of the following should be of MOST concern to an IS auditor reviewing data backup procedures prior to a system migration?

Answer options

• A. Data backups are stored at a different site from the systems application servers.
• B. Incremental data backup jobs are paused during the migration.
• C. Data restoration procedures have never been utilized to restore the system's database.
• D. A full backup has not occurred within a week.

Correct answer: C

Explanation

The correct answer is C because if data restoration procedures have never been utilized, there is a significant risk that the organization may not be able to recover the database in case of failure. Options A and B are less critical, as having backups stored off-site and pausing incremental backups during migration are standard practices. Option D, while important, does not indicate a complete inability to restore data like option C does.