Section: Protection of Information Assets
Explanation:
Personnel performing IT audits should have information systems knowledge commensurate with the scope
of the institution's IT environment. They should also possess sufficient analytical skills to determine the root
cause of deficiencies.

Explanation/Reference:
Explanation:
A callback feature hooks into the access control software and logs all authorized and unauthorized access attempts, permitting the follow-up and further review of potential breaches. Call forwarding (choice D) is a means of potentially bypassing callback control. By dialing through an authorized phone number from an unauthorized phone number, a perpetrator can gain computer access. This vulnerability can be controlled through callback systems that are available.

Section: Protection of Information Assets
Explanation:
Although the primary business objective of BCP and DRP is to mitigate the risk and impact of a business
interruption, the dominating objective remains the protection of human life.