An IS auditor has audited a business continuity plan (BCP). Which of the following findings is the MOST
critical?

A.
Nonavailability of an alternate private branch exchange (PBX) system

B.
Absence of a backup for the network backbone

C.
Lack of backup systems for the users’ PCs

D.
Failure of the access card system

Explanation:
Failure of a network backbone will result in the failure of the complete network and impact the ability of all users
to access information on the network. The nonavailability of an alternate PBX system will result in users not
being able to make or receive telephone calls or faxes; however, users may have alternate means of
communication, such as a mobile phone or e-mail. Lack of backup systems for user PCs will impact only the
specific users, not all users. Failure of the access card system impacts the ability to maintain records of the
users who are entering the specified work areas; however, this could be mitigated by manual monitoring
controls.