An IS auditor finds that an organization's data loss prevention (DLP) system is configured to use vendor default settings to identify violations. The auditor's MAIN concern should be that:

Which of the following is MOST helpful to an IS auditor when assessing the effectiveness of controls?

The IS auditor has recommended that management test a new system before using it in production mode. The BEST approach for management in developing a test plan is to use processing parameters that are:

in a controlled application development environment the MOST important segregation of duties should be between the person who implements changes into the production environment and the:

IT disaster recovery time objectives (RTOs) should be based on the: