A third-party auditor was hired by your company to complete the annual audit of the company's financial system. The audit report indicates that the accounts payable department did not follow proper record disposal procedures during a business continuity plan (BCP) tabletop exercise involving manual processing of financial transactions. Which of the following should be your recommendations?

Question

(Choose two.)

A. Wait for the internal audit results.
B. Compare the manual processing to the automated processing of financial transactions.
C. Review company procedures.
D. Implement mandatory training.
E. Perform another BCP exercise.

Answer 1

C,D
Explanation: You should recommend the company review its procedures and implement mandatory training.
It is not necessary to wait for the internal audit results. Because this audit has found an issue, that issue should be addressed.
You should not compare manual processing to the automated processing because those procedures will be vastly different.
While you should perform other BCP exercises throughout the year, it is not the correct procedure to follow after this problem has been discovered. You should always immediately address any issues that arise from a BCP exercise.