Which of the following is the best advice for an information systems auditor to improve the control environment?

 During the information system audit, the security configuration on the company’s virtual server cluster was found to be different.

Which of the following is the best advice for an information systems auditor to improve the control environment?
A . Implement security monitoring for high-risk virtual servers.
B . Independent review of the security configuration of each server.
C . Implement a secure configuration baseline for the virtual server.
D . Perform a standard patch management review on the virtual server cluster.

View Answer

Answer: C