An internal audit has detected that a number of archived tapes are missing from secured storage.
There was no recent need for restoration of data from the missing tapes. The location is monitored
by access control and CCTV systems. Review of the CCTV system indicates that it has not been
recording for three months. The access control system shows numerous valid entries into the
storage location during that time. The last audit was six months ago and the tapes were accounted
for at that time. Which of the following could have aided the investigation?
A.
Testing controls
B.
Risk assessment
C.
Signed AUP
D.
Routine audits