Which of the following should be of GREATEST concern to an IS auditor conducting an audit of an organization that recently experienced a ransomware attack?

The correct answer is A. Backups were only performed within the local network. The greatest concern is that backups were only performed within the local network, because ransomware often encrypts local and network-connected backups, making data recovery impossible without paying the ransom. Effective backup strategies should include offline or offsite…

Submitted by tarun92· Apr 18, 2026Information Security Incident Management

Question

Options

ABackups were only performed within the local network.
BEmployees were not trained on cybersecurity policies and procedures.
CAntivirus software was unable to prevent the attack even though it was properly updated.
DThe most recent security patches were not tested prior to implementation.

How the community answered

(59 responses)

A
56% (33)
B
12% (7)
C
7% (4)
D
25% (15)

Explanation

The greatest concern is that backups were only performed within the local network, because ransomware often encrypts local and network-connected backups, making data recovery impossible without paying the ransom. Effective backup strategies should include offline or offsite backups to ensure recoverability.

Topics

#Ransomware Response#Backup Strategy#Incident Recovery#Data Protection

Community Discussion

No community discussion yet for this question.

Full CISM Practice