CISA Certified Information Systems Auditor – Question0398

Which of the following should be of MOST concern to an IS auditor evaluating a forensics program?

A.
Forensic images are stored on removable media with encryption.
B. Forensic images are only stored for involuntarily terminated employees.
C. Forensic images are only maintained for 12 months.
D. Forensic images are stored on shared disks.

Correct Answer: D