CS Professional · Internal and Forensic Audit · Emerging Issues and Challenges
After a ransomware attack, Narmada Pharma Ltd restored operations from backups but the internal auditor found the restoration took 6 days against a business requirement of 1 day. Which concept does this gap relate to?
The gap relates to the recovery time objective not being met. RTO is the maximum acceptable time to restore services after disruption; restoring in 6 days against a one-day requirement shows the disaster recovery plan was inadequate or untested.
- ARecovery time objective not being metCorrect
- BSegregation of duties
- CMateriality threshold
- DCut-off procedure
Explanation
The recovery time objective is the maximum acceptable time to restore services. Actual restoration of 6 days exceeded the 1 day requirement, so the RTO was not met, indicating weak disaster recovery planning and testing.
Did you get it right without looking?
One question tells you little. A timed set on Emerging Issues and Challenges shows your real accuracy, how long you take and where you lose marks.
More Emerging Issues and Challenges questions
- Kaveri Foods Ltd publishes a claim that '90% of our packaging is recyclable'. The internal auditor, testing the claim, finds that the figure…
- Sagar Foods Ltd uses a robotic process automation bot to post vendor payments. In planning the internal audit, which risk is most specific t…
- During an ESG data audit at Sunrise Cements Ltd, the internal auditor finds that plant-level carbon emission figures are entered manually in…
- During a procurement review, an internal auditor at Bharat Textiles Ltd notices that the purchase manager approves vendor invoices and also …
- During a review at Kaveri Pharma Ltd, an internal auditor learns that employees received an email appearing to come from the CFO asking them…
- Meera Auto Components Ltd's internal auditor, using analytics on payroll, finds 12 employees sharing the same bank account number and no att…