Certified Information Systems Auditor (CISA) — Question 540

An organization has recently implemented a Voice-over IP (VoIP) communication system. Which of the following should be the IS auditor's PRIMARY concern?

Answer options

• A. Voice quality degradation due to packet loss
• B. Lack of integration of voice and data communications
• C. A single point of failure for both voice and data communications
• D. Inability to use virtual private networks (VPNs) for internal traffic

Correct answer: C

Explanation

The primary concern is the single point of failure for both voice and data communications, as it poses a significant risk to operational continuity. While voice quality degradation, integration issues, and VPN limitations are important, they do not directly result in a complete communication outage, which is critical for business operations.