An IS auditor reviewing the threat assessment for a data center would be MOST concerned if:
A . all identified threats relate to external entities
B . some of the identified threats are unlikely to occur
C . neighboring organizations’ operations have been included
D . the exercise was completed by local management
Answer: D