Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
lack of data encryption is of greater concern
Encrypting backups is essential to ensure that the data remains confidential, especially when it is transmitted or stored in an external environment such as a cloud service provider. Without encryption, the data may be exposed to unauthorized access or theft during transmission or storage. Additionally, lack of encryption may violate regulatory requirements or organization's security policies. Therefore, an IS auditor must ensure that backups are encrypted using strong encryption algorithms, and the encryption keys are securely managed.
Validation of backup data refers to the process of verifying the integrity, completeness, and accuracy of the backup data before sending it to the cloud provider. Validation is necessary to ensure that the backup data is not corrupt, missing, or inconsistent, which may result in a failed restore or data loss. However, while important, it is not the GREATEST concern as the validation process can be performed before sending the backup to the cloud provider.