Question: Based on the information provided, which of the following situations presents the GREATEST information security risk for an organization with multiple, but small, domestic processing locations?
A.) Systems operation procedures are not enforced
B.) Change management procedures are poor
C.) Systems development is outsourced
D.) Systems capacity management is not performed

Download pdf (with explanations) edition of this exam.