CISA Certified Information Systems Auditor – Question0375

An IS auditor is reviewing a sample of production incidents and notes that root cause analysis is not being performed. Which of the following is the GREATEST risk associated with this finding?

A.
Future incidents may not be resolved in a timely manner.
B. Future incidents may be prioritized inappropriately.
C. The same incident may occur in the future.
D. Service level agreements (SLAs) may not be met.

Correct Answer: C