Which of the following should be an IS auditor's GREATEST concern when reviewing an organization's security controls for policy compliance?

Question

roberto gaccetta · Accepted Answer

Security policy documents are available on a public domain website.

roberto gaccetta · Answer

The security policy has not been reviewed within the past year.

roberto gaccetta · Answer

Security policies are not applicable across all business units.

roberto gaccetta · Answer

End users are not required to acknowledge security policy training.

List of questions