Which of the following should be the auditor’s NEXT course of action?

An IS auditor finds that firewalls are outdated and not supported by vendors .

Which of the following should be the auditor’s NEXT course of action?
A . Report the mitigating controls.
B. Report the security posture of the organization.
C. Determine the value of the firewall.
D. Determine the risk of not replacing the firewall.

View Answer

Answer: D