Certified Information Systems Auditor (CISA) — Question 1377

Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?

Answer options

• A. CCTV recordings are not regularly reviewed.
• B. CCTV records are deleted after one year.
• C. CCTV footage is not recorded 24 x 7.
• D. CCTV cameras are not installed in break rooms.

Correct answer: A

Explanation

The correct answer, A, highlights the importance of regularly reviewing CCTV recordings to identify security breaches or incidents. Options B and C are less critical as they pertain to retention periods and recording schedules, which, while important, do not directly impact the immediate security oversight. Option D, although relevant to coverage, is not as significant as the failure to review recordings.