Which of the following exposures associated with the spooling of sensitive reports for offline printing should an
IS auditor consider to be the MOST serious?

A.
Sensitive data can be read by operators.

B.
Data can be amended without authorization.

C.
Unauthorized report copies can be printed.

D.
Output can be lost in the event of system failure.

Explanation:
Unless controlled, spooling for offline printing may enable additional copies to be printed. Print files are unlikely
to be available for online reading by operators. Data on spool files are no easier to amend without authority than
any other file. There is usually a lesser threat of unauthorized access to sensitive reports in the event of a
system failure.