CISA Interview Question:

Which of the following is the GREATEST risk of an inadequate policy definition for ownership of data and systems?

Submitted by: Administrator

1. User management coordination does not exist.
2. Specific user accountability cannot be established.
3. Unauthorized users may have access to originate, modify or delete data.
4. Audit recommendations may not be implemented.

Answer: C
Submitted by: Administrator