Certified Information Systems Auditor (CISA) — Question 234
Which of the following is the MOST effective way to assess the controls over the hardware maintenance process?
Answer options
- A. Review the hardware maintenance logs to confirm all recorded dates are within one year
- B. Compare the hardware maintenance log with the recommended maintenance schedule
- C. Validate that management tracks the mean time between failures (MTBFs)
- D. Identify the required maintenance procedures and ensure the maintenance policy is in alignment
Correct answer: B
Explanation
The correct answer is B because comparing the hardware maintenance log with the recommended maintenance schedule directly assesses whether the hardware is being maintained as per the established guidelines. Option A is less effective as it only checks the recency of logs without evaluating their adequacy. Option C, while useful, does not directly relate to the controls over the maintenance process itself. Option D focuses on policy alignment rather than the effectiveness of the actual maintenance process.