Which of the following should be the GREATEST concern to an IS auditor reviewing the information security framework of an organization?

Question

Udara Somachandra · Accepted Answer

The information security policy is not aligned with regulatory requirements.

Udara Somachandra · Answer

The information security policy has not been updated in the last two years.

Udara Somachandra · Answer

Senior management was not involved in the development of the information security policy.

Udara Somachandra · Answer

A list of critical information assets was not included in the information security policy.

List of questions