Question 1

Explanation

Correct Answer: D. Media is not retained till the end of the retention period. Explanation: Among the given options, the auditor's greatest concern in the audit of the orgnization's disposal process should be that the media is not retained until the end of the retention period. Retaining media, such as storage devices or backups, until the end of the retention period is essential for data security, regulatory compliance, and legal requirements. Failing to retain media for the entire retention period may result in the loss or destruction of critical data, violation of legal and regulatory obligations, and potential breaches of customer confidentiality. Option A suggests incomplete disposal records for retired IT assets, which is a concern but may not have the same level of impact as not retaining media till the end of the retention period. Option B suggests inadequate review of disposal procedures , which is also a significant concern, but not retaining media until the end of the retention period poses a higher risk as it affects the overall data retention and security practices. Option C suggests a lack of segregation of duties in the disposal process, which is important for preventing fraud and ensuring accountability, but it may not have the same level of impact as the failure to retain media till the end of the retention period. Not retaining media till the end of the retention period is the greatest concern as it can lead to severe consequences, including data loss, non-compliance, and potential legal and regulatory repercussions. Therefore, it should be the auditor's primary focus during the audit of the multinational bank's disposal process.