An IS auditor is reviewing an industrial control system (ICS) that uses older unsupported technology in the scope of an upcoming audit. What should the auditor consider the MOST significant concern?

December 16, 2021 by Admin

An IS auditor is reviewing an industrial control system (ICS) that uses older unsupported technology in the scope of an upcoming audit. What should the auditor consider the MOST significant concern?

  • Technical specifications are not documented.
  • Disaster recovery plans (DRPs) are not in place.
  • Attack vectors are evolving for industrial control systems.
  • There is a greater risk of system exploitation.

Leave a Reply