Question

During an audit of a company's disaster recovery arrangements, the IS auditor confirms that full backups are performed nightly and encrypted copies are shipped to an offsite vault daily. Backup completion logs show no failures for the past 12 months. Which of the following should be the auditor's GREATEST concern?

Accepted Answer

The organization has never performed a test restoration of the backup media to confirm data can be recovered.

Answer

The backup media is retained offsite rather than in a fireproof safe within the data center.

Answer

Backups are performed nightly rather than through continuous replication.

Answer

The backup completion logs are reviewed by operations staff rather than by an independent party.