Question

During a review of an organization's IT asset management process, an IS auditor discovers that the automated discovery tool reports 4,200 devices connected to the network, while the configuration management database (CMDB) lists only 3,600 assets. Which of the following is the MOST significant risk arising from this discrepancy?

Accepted Answer

Unmanaged devices may be unpatched or unauthorized, creating security exposures and inaccurate license compliance

Answer

The organization may over-purchase software licenses for the 600 additional devices

Answer

The discovery tool consumes excessive network bandwidth during scans

Answer

Depreciation schedules in the financial system will overstate asset value