Certified Information Systems Auditor (CISA) — Question 669

Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system?

Answer options

• A. System performance may be impacted by the migration.
• B. Records past their retention period may not be migrated to the new system.
• C. Data from the source and target system may have different data formats.
• D. Data from the source and target system may be intercepted.

Correct answer: D

Explanation

The correct answer is D because data interception poses a critical security risk during migration, potentially exposing sensitive information. Options A, B, and C, while valid concerns, primarily relate to performance and compliance issues rather than direct security threats.