An IS auditor finds an IT department does not perform periodic discovery of hardware and software deployed in an environment.
What is the GREATEST associated risk?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
The greatest associated risk of not performing periodic discovery of hardware and software deployed in an environment is option B, which is an inaccurate inventory of hardware and software.
When an IT department fails to perform periodic discovery of hardware and software deployed in an environment, it can result in an inaccurate inventory of the organization's IT assets. The inaccurate inventory may include hardware that is not being used, which can lead to unnecessary maintenance costs and wasted resources. Additionally, software that is not in use can lead to wasted licensing fees. This scenario can also lead to a lack of proper asset management, which may result in hardware or software being unaccounted for, which can lead to security risks.
Option A, an increase in unused licenses within the organization, is related to the inaccurate inventory of software licenses. Unused licenses can result in wasted licensing fees, but it is not the greatest risk associated with not performing periodic discovery.
Option C, inaccurate cost estimates of hardware and software, can occur when an organization does not have an accurate inventory of its IT assets. It can result in the organization purchasing unnecessary hardware or software, which can lead to overspending.
Option D, incomplete lists for third-party license audits, is also related to the inaccurate inventory of software licenses. If an organization cannot provide a complete list of software licenses, it may be non-compliant with licensing agreements, which can result in penalties and fines. However, it is not the greatest risk associated with not performing periodic discovery.
In summary, an inaccurate inventory of hardware and software is the greatest risk associated with not performing periodic discovery of IT assets in an organization.