Exam CRISC topic 1 question 1722 discussion

Actual exam question from Isaca's CRISC

Question #: 1722
Topic #: 1

A risk practitioner has implemented a key risk indicator (KRI) that triggers a warning when the number of untreated IT control deficiencies exceeds a given threshold. Which of the following should be the GREATEST concern regarding the design of this KRI?

A. Setting unrealistic targets for compliance
B. Ignoring the significance of the control deficiencies
C. Generating a large number of false-positive warnings
D. Failing to attract sufficient management support

Show Suggested Answer

Suggested Answer: C 🗳️

by tomiabiodun at June 9, 2024, 4:10 a.m.

Comments

Submit Cancel

Staanlee

9 months, 1 week ago

Selected Answer: B

The greatest concern regarding the design of this Key Risk Indicator (KRI) is ignoring the significance of the control deficiencies. A KRI that only measures the quantity of untreated deficiencies without considering their potential impact or severity might not provide a comprehensive view of the actual risk. It’s important that the KRI reflects not only the number but also the significance of the deficiencies to ensure effective risk management and prioritization.

upvoted 1 times

...

tomiabiodun

10 months, 4 weeks ago

Selected Answer: A

I would pick A cos its important for KRIs to be attainable otherwise its useless

upvoted 1 times

...

Exam CRISC All Questions

View all questions & answers for the CRISC exam

Exam CRISC topic 1 question 1722 discussion

Comments

Staanlee

tomiabiodun

SY0-701