Scenario Bank !Baxu had recently dismissed its only IT staffer after receiving negative results from an IT audit. Then an unexpected set of COVID-19 cases forced the bank to work from an alternate operating site while they dis-infect the entire building, in compliance with its documented disaster recovery plan. Technology at the alternate site failed to function as originally designed, keeping the bank from continuing its operations until days after the initial cases surfaced. In addition to bruising the banks reputation within the community, the incident resulted in two financial damages: loss of revenue during the downtime, and fines imposed on it for being unable to meet its regulatory requirements. While employees are suffering from a lack of confidence prevalent throughout the banks internal culture, Bank !Baxus executives are expecting an audit in the next six months and are concerned about the unstable, unsecure, and lack of support for the banks technology. You have been recruited as the new system administrator at Bank !Baxu and in preparation for the external audit, you have decided to run a mini internal audit to identify and mitigate loopholes in your IT infrastructure and check regulatory compliance. Among your findings, you realise that your antivirus, Kaspersky has expired and your end users are being prompted to renew or uninstall the package. More so, the organisation has extensively implemented Bring Your Own Device (BYOD) in efforts of cutting costs on devices. Use the scenario above to answer all the questions. The answers should be relative to the context.

4. Moving forward, which standard would you recommend to Bank !Baxu to implement and state why? [10 marks]