Which of the following should be recommended as the PRIMARY factor to determine system criticality?

exams CISA V1 CISA exam 0 Comments

During an external review, an IS auditor observes an inconsistent approach in classifying system criticality within the organization .

Which of the following should be recommended as the PRIMARY factor to determine system criticality?
A . Key performance indicators (KPIs)
B. Maximum allowable downtime (MAD)
C. Recovery point objective (RPO)
D. Mean time to restore (MTTR)

Answer: B