Exam CRISC topic 1 question 846 discussion

The correct answer should be D.

Minimizing the complexity of IT infrastructure helps reduce the likelihood of errors, misconfigurations, and system failures. Complex IT environments are more difficult to manage, maintain, and troubleshoot, which increases the potential for operational risk. Simplifying infrastructure allows for better control, clearer processes, easier monitoring, and faster identification and remediation of issues, ultimately reducing risk.

D. Minimizing complexity of IT infrastructure. Minimizing the complexity of IT infrastructure is the most important factor for reducing IT operational risk. Complex IT environments are often more susceptible to operational failures, vulnerabilities, and errors. Simplicity in IT infrastructure can lead to more predictable and stable operations, making it easier to manage, monitor, and secure the technology environment. While increasing the frequency of data backups and improving senior management's understanding of IT operations are important measures, they are not as fundamental as reducing complexity. Decentralizing IT infrastructure can introduce additional risks if not managed properly, as it may lead to inconsistent control and management. Therefore, simplifying the IT environment should be a foundational step in reducing IT operational risk.

It is D. Less complex equals less risk.

Agree with D