An IS auditor is reviewing an organization's operational log management. Which of the following should be the auditor's GREATEST concern?

The correct answer is A. Inappropriate access rights to transaction record logs. The greatest concern for the IS auditor would be inappropriate access rights to transaction record logs. Unauthorized access to these logs can lead to data manipulation, tampering, or concealment of malicious activities, which would compromise the integrity of the…

Submitted by packet_pusher· Apr 18, 2026Protection of Information Assets

Question

An IS auditor is reviewing an organization’s operational log management. Which of the following should be the auditor’s GREATEST concern?

Options

AInappropriate access rights to transaction record logs
BInclusion of information security test results in logs
COutsourcing of log analysis and review
DLack of management approval for operational log expenditures

How the community answered

(46 responses)

A
61% (28)
B
9% (4)
C
24% (11)
D
7% (3)

Explanation

The greatest concern for the IS auditor would be inappropriate access rights to transaction record logs. Unauthorized access to these logs can lead to data manipulation, tampering, or concealment of malicious activities, which would compromise the integrity of the organization's security and audit process.

Topics

#Log management#Access control#Information security risk#IS Auditing

Community Discussion

No community discussion yet for this question.

Full CISA Practice