An IS auditor finds that communication closets requiring electronic swipe card access are missing access logs. Which of the following should be done NEXT?
An IS auditor finds that communication closets requiring electronic swipe card access are missing access logs. Which of the following should be done NEXT?
If access logs are missing for communication closets with electronic swipe card access, the immediate next step is to determine whether there are video cameras covering the entrances. Video cameras can provide a visual record of individuals entering and exiting these areas, serving as an alternative or supplementary method to monitor access in the absence of logs. This step helps ensure that there is another layer of security and accountability in place for monitoring access to these sensitive areas.
D. Identifying lost or stolen cards helps assess the severity of the situation. If cards are unaccounted for, it suggests a higher risk of unauthorized access and potential theft of equipment or data. Once the auditor determines the status of the swipe cards, they can then consider additional steps like reviewing video footage (option A) or investigating missing equipment (option C).
Video cameras covering the entrances can provide visual records of individuals entering and exiting these areas. If access logs are missing or incomplete, video footage can serve as an alternative or supplementary method to monitor who has accessed the closets.