Which of the following should be of MOST concern to an IS auditor reviewing the public key infrastructure (PKI) for enterprise e-mail?

Which of the following should be of MOST concern to an IS auditor reviewing the public key infrastructure (PKI) for enterprise e-mail?
A . The private key certificate has not been updated.
B . The certificate revocation list has not been updated.
C . The certificate practice statement has not been published.
D . The PKI policy has not been updated within the last year.

View Answer

Answer: B