CISA Certified Information Systems Auditor – Question0249

IT service engineers at a large organization are unable to effectively prioritize system-generated alerts from hundreds of applications running across multiple servers and databases. As a result, many alerts are often ignored, leading to major problems including downtime. Which of the following is the BEST IS audit recommendation to address this situation?

A.
Prioritize alerts from legacy applications that may require remote support from external vendors.
B. Implement a threshold management system that prioritizes alerts over a certain age.
C. Develop a classification scheme that prioritizes alerts according to potential business impact.
D. Group alerts from related systems and immediately escalate to the application owner.

Correct Answer: D