Certified Information Systems Auditor (CISA) — Question 1414

An IS auditor plans to review all access attempts to a video-monitored and proximity card-controlled communications room. Which of the following would be MOST useful to the auditor?

Answer options

• A. Security incident log
• B. Alarm system with CCTV
• C. System electronic log
• D. Manual sign-in and sign-out log

Correct answer: C

Explanation

The System electronic log is the most useful for the auditor as it provides detailed records of all access attempts, including timestamps and user information. The other options, while relevant, do not offer the same comprehensive data or may not capture all access attempts effectively.