What risk may the organisation be exposed to?

Backup media is kept in the same secure area as the servers.

What risk may the organisation be exposed to?
A . Unauthorised persons will have access to both the servers and backups
B . Responsibility for the backups is not defined well
C . After a fire, the information systems cannot be restored
D . After a server crash, it will take extra time to bring it back up again

Answer: C

Explanation:

The risk that the organization may be exposed to if backup media is kept in the same secure area as the servers is that after a fire, the information systems cannot be restored. Backup media is a copy of data or information that can be used to restore the original data or information in case of loss, corruption or destruction. Backup media should be stored in a different location from the original data or information, preferably in a remote or off-site location, to ensure its availability and protection from physical threats and hazards. If backup media is kept in the same secure area as the servers, it means that both the original data and the backup data are vulnerable to the same physical threats and hazards, such as fire, flood, theft, etc. If a fire occurs in the secure area, both the servers and the backup media could be damaged or destroyed, making it impossible to restore the information systems and resume normal operations.

Reference: [CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course], ISO/IEC 27001:2022 Information technology ― Security techniques ― Information security management systems ― Requirements, What is Backup Media?