Question

During a governance review, an IS auditor finds that the same individual manages the IT department's information security function and also serves as the head of IT operations, approving changes to production systems. Which of the following is the auditor's GREATEST concern regarding this organizational structure?

Accepted Answer

The security function lacks independence from the operations it is meant to oversee, creating a conflict of interest

Answer

The individual may become a single point of failure if they leave the organization

Answer

Combining the roles increases the salary cost of the position beyond budget

Answer

The individual may not have sufficient technical certifications for both roles