An IS auditor determines that a business continuity plan has not been reviewed and approved by management.
Which of the following is the MOST significant risk associated with this situation?

Which of the following is the BEST justification for deferring remediation testing until the next audit?

In assessing the priority given to systems covered in an organization's business continuity plan (BCP), an IS auditor should FIRST:

After delivering an audit report, the audit manager discovers that evidence was overlooked during the audit This evidence indicates that a procedural control may have failed and could contradict a conclusion of the audit. Which of the following risks is MOST affected by the oversight?

Which of the following is MOST likely to be included in computer operating procedures in a large data center?