An IS auditor has completed a network audit. Which of the following is the MOST significant logical security finding?
A.
Network workstations are not disabled automatically after a period of inactivity.
B.
Wiring closets are left unlocked
C.
Network operating manuals and documentation are not properly secured.
D.
Network components are not equipped with an uninterruptible power supply.
Explanation:
Choice A is the only logical security finding. Network logical security controls should be in place to restrict, identify, and report authorized and unauthorized users of the network. Disabling inactive workstations restricts users of the network. Choice D is an environmental issue and choices B and C are physical security issues. Choices B, C and D should be reported to the appropriate entity.