Backup media that have not been tested for an extended period face a high risk of device obsolescence, meaning compatible hardware to read the media may no longer be available, making data retrieval difficult or impossible even if the data itself is intact.

A business impact analysis identifies the criticality of systems and their effect on business operations. When deciding which applications to audit, the BIA provides the most important input because it helps prioritize systems based on their importance to the organization and the potential impact of failure or compromise.

To indicate the authenticity of its web pages for users utilizing a public key infrastructure (PKI), an organization should purchase digital certificates from trusted third parties, also known as Certificate Authorities (CAs). These digital certificates verify the identity of the organization and establish trust with users accessing the site, ensuring that the communication is secure and the website is legitimate.

Allowing the DBA to both manage the database and approve user access roles concentrates too much power in one role. This violates the principle of segregation of duties and increases the risk of unauthorized or inappropriate access going undetected.