CISA Certified Information Systems Auditor – Question3002

The MAIN criterion for determining the severity level of a service disruption incident is:

A.
cost of recovery.
B. negative public opinion.
C. geographic location.
D. downtime.

Correct Answer: D

Explanation:

Explanation:
The longer the period of time a client cannot be serviced, the greater the severity of the incident. The cost of recovery could be minimal yet the service downtime could have a major impact.
Negative public opinion is a symptom of an incident. Geographic location does not determine the severity of the incident.