Which of the following should be recommended as the PRIMARY factor to determine system criticality?

exams CISA V0 CISA exam 0 Comments

During an external review, an IS auditor observes an inconsistent approach in classifying system criticality within the organization.

Which of the following should be recommended as the PRIMARY factor to determine system criticality?
A . Key performance indicators (KPIs)
B. Maximum allowable downtime (MAD)
C. Recovery point objective (RPO)
D. Mean time to restore (MTTR)

Answer: B