During an audit of an access control system, an IS auditor finds that RFID card readers are not connected via the network to a central server. Which of the following is the GREATEST risk associated with this finding?
- Lost or stolen cards cannot be disabled immediately.
- Card reader firmware updates cannot be rolled out automatically.
- The system is not easily scalable to accommodate a new device.
- Incidents cannot be investigated without a centralized log file.
Reveal Solution Next Question