Exam CISA All QuestionsBrowse all questions from this exam
Question 563

An audit has identified that business units have purchased cloud-based applications without IT's support. What is the GREATEST risk associated with this situation?

    Correct Answer: B

    The greatest risk associated with business units purchasing cloud-based applications without IT’s support is that the applications may not reasonably protect data. Without IT involvement, there is uncertainty regarding whether these applications adhere to the organization's security policies and standards. This can lead to data breaches, non-compliance with data protection regulations, and potential financial and reputational damage to the organization.

Discussion
DeeplaxmiOption: B

greatest concern i feel is B

MunaMOption: B

Could the answer be B?

SwallowsOption: B

While the absence of these applications from business continuity plans (BCPs) (option D) is also a concern, the risk associated with inadequate data protection measures in the applications is generally more immediate and impactful. Loss of data due to a lack of protection measures can have severe consequences for the organization's reputation, compliance, and financial stability.

EBTURKOption: B

The greatest risk associated with business units purchasing cloud-based applications without IT’s support is that the applications may not reasonably protect data