Exam CGEIT topic 1 question 48 discussion

Actual exam question from Isaca's CGEIT

Question #: 48
Topic #: 1

An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?

A. Results of application security testing
B. Results of application security awareness training quizzes
C. Number of reported security incidents
D. Number of IT employees attending security training sessions

Show Suggested Answer

Suggested Answer: C 🗳️

by shiowbah at March 27, 2024, 10:49 p.m.

Comments

Submit Cancel

ARaghunanan

10 months, 2 weeks ago

Selected Answer: A

The results of application security testing directly reflect the quality of application design and configuration in terms of security.

upvoted 1 times

...

Zumbaman

1 year, 3 months ago

The best key risk indicator (KRI) to show progress in IT employee behavior in this context would be B. Results of application security awareness training quizzes. This KRI directly measures the impact of training on employee awareness and understanding of security risks, which is the core issue identified in the IT audit report.

upvoted 1 times

...

shiowbah

1 year, 4 months ago

B. Results of application security awareness training quizzes

upvoted 2 times

...