Question

During a network security review, an IS auditor finds that a manufacturing company operates a single flat network where corporate workstations, production servers, and IoT-enabled industrial control systems all share the same broadcast domain with no internal filtering. Which risk should the auditor emphasize as MOST significant?

Accepted Answer

A compromise of a single low-security device could enable lateral movement to critical production systems

Answer

Broadcast traffic will slightly increase latency for end-user applications

Answer

IP address exhaustion may occur as the number of connected devices grows

Answer

Network documentation will be harder to maintain without defined subnets