While conducting audit procedures at the organization's data center, an internal auditor noticed the following:
- Backup media was located on data center shelves.
- Backup media was organized by date.
- Backup schedule was one week in duration.
- The system administrator was able to present restore logs.
Which of the following is reasonable for the internal auditor to conclude?
Backup media is not properly stored, as the storage facility should be off-site. Keeping backup media on data center shelves suggests a potential risk if the data center itself is compromised by disasters such as fires or floods. Best practices recommend that backups be stored in a separate, off-site location to mitigate this risk.
Should be A?
the correct answer is A
A is the answer.
Which one is right - A or B?
the correct answer is B.