The IS auditor learns that when equipment was brought into the data center by a vendor, the emergency power
shutoff switch was accidentally pressed and the UPS was engaged. Which of the following audit
recommendations should the IS auditor suggest?
A.
Relocate the shut off switch.
B.
Install protective covers.
C.
Escort visitors.
D.
Log environmental failures.
Explanation:
A protective cover over the switch would allow it to be accessible and visible, but would prevent accidentalactivation.
Incorrect Answers:
A:
Relocating the shut off switch would defeat the purpose of having it readily accessible.
C:
Escorting the personnel moving the equipment may not have prevented this incident.
D:
Logging of environmental failures would provide management with a report of incidents, but reporting alone
would not prevent a reoccurrence.