Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?
Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?
The most concerning issue associated with a data center's closed-circuit television (CCTV) surveillance cameras is that CCTV recordings are not regularly reviewed. Regular review of CCTV footage is critical to detect and respond to security incidents in a timely manner. If the recordings are not reviewed consistently, potential breaches or unauthorized activities may go unnoticed, thereby compromising the security of the data center. This oversight is more critical than issues such as the duration of record retention, 24 x 7 recording, or camera placement in less critical areas like break rooms.
This is a typiclal ISACA thinking. : The most concerning issue with regards to CCTV surveillance cameras is that CCTV recordings are not regularly reviewed. It is essential for an IS auditor to ensure that recordings are frequently reviewed to ensure that the security of the data center is properly maintained. Additionally, the IS auditor should ensure that CCTV footage is recorded 24 x 7, and records should not be deleted until all necessary procedures are taken. Lastly, CCTV cameras should be installed in break rooms, as these are areas where confidential information may be discussed.
Even I thought C is correct answer until I realized that without a monitor / review, recording 24 x 7 is of no use as it cannot detect any intrusions. At best it would be a deterrent without monitoring / review but not a detective control which is more effective form of control.
I believe the answer is C
The lack of regular review of CCTV recordings means that security incidents may not be detected in a timely manner.
Among the given options, the issue that should be of MOST concern to an IS auditor when reviewing a data center's closed circuit television (CCTV) surveillance cameras is: C. CCTV footage is not recorded 24 x 7. The continuous recording of CCTV footage is crucial for maintaining security and ensuring that any security incidents or breaches can be properly investigated. If the CCTV cameras are not recording 24 x 7, there can be significant gaps in the surveillance coverage, leaving the data center vulnerable to undetected security incidents or unauthorized access.
Answer: A
not being reviewed is the most concern for me
Answer is C
Answer is A CISA Manual has this verbiage- Video cameras, including motion-activated models, should be located at strategic points and monitored by security guards. The video surveillance recording should be retained for possible future playback, and it should be recorded in sufficient resolution to permit enlarging the image to identify an intruder.
recording 24 x 7 of course a concern, but have you ever reviewed the CCTV recording even if the recording is done 8 hours ?
dumpschool.com Answer C
You don't need to record everything in your data center 24 hours a day. To reduce the amount of review, you can install a motion detector to record only when motion occurs. So the answer is A.
Only if review of recordings means the live viewing by security can A be the correct answer. Otherwise, the correct answer is C.
Why is review more important than the records?
because even if it is been recorded it has to be reviewed otherwise it wont hold any importance
C. CCTV footage is not recorded 24 x 7
Who regulary revie recordings from CCTV? Only live viewing by security make sens and then 24/7 is crucial, or reviewing after incident when also 24/7 is crucial.
24 X 7 recording if not available, reviews cannot take place