December 16, 2021 by Admin

Which of the following findings should be of MOST concern to an IS auditor reviewing an organization’s business continuity plan (BCP)?

• An application inventory is not included.
• A resource optimization plan is not included.
• A business feasibility study was not performed.
• A business impact analysis (NA) was not performed.