The IS auditor learns that when equipment was brought into the data center by a vendor, the
emergency power shutoff switch was accidentally pressed and the UPS was engaged. Which of the
following audit recommendations should the IS auditor suggest?
A.
Relocate the shut off switch.
B.
Install protective covers.
C.
Escort visitors.
D.
Log environmental failures.
Explanation:
A protective cover over the switch would allow it to be accessible and visible, but would prevent
accidental activation.
Incorrect Answers:
A: Relocating the shut off switch would defeat the purpose of having it readily accessible.
C: Escorting the personnel moving the equipment may not have prevented this incident.
D: Logging of environmental failures would provide management with a report of incidents, but
reporting alone would not prevent a reoccurrence.