Question

During an audit of IT operations, an IS auditor notes that the organization only investigates system performance after users report slowdowns, and no forecasting of future resource demand is performed. Which weakness should the auditor identify as the MOST significant concern?

Accepted Answer

The absence of proactive capacity management to anticipate and prevent performance and availability problems

Answer

The lack of a formal help desk ticketing tool for logging user complaints

Answer

The failure to encrypt performance monitoring data in transit

Answer

The absence of a documented data retention schedule for system logs