Exam CRISC topic 1 question 605 discussion

Although current controls are maintaining continuity, the rising failure rate indicates potential underlying problems that need investigation to ensure long-term reliability this will be done by doing root cause analysis

D. Controls are effective for ensuring continuity. The risk practitioner should conclude that "D. Controls are effective for ensuring continuity." Even though hardware failure incidents have been increasing, the fact that there have been no interruptions to business operations indicates that the built-in redundancy and fault-tolerant architecture are effectively mitigating the impact of these incidents. The controls in place are ensuring business continuity and preventing disruptions despite the hardware failures. The absence of impact (option A) and the need for a root cause analysis (option B) may not be warranted in this case, as the control measures are effectively managing the situation. The conclusion that hardware needs to be upgraded (option C) is not supported by the information provided, as the existing controls have prevented interruptions without the need for immediate hardware upgrades.

I go with B

Agree with D.

While a root cause analysis may still be beneficial in identifying the underlying causes of the increase in hardware failure incidents, the absence of business interruptions suggests that the controls in place are currently sufficient to manage the risks associated with these incidents. Therefore, the risk practitioner should acknowledge the effectiveness of the controls in place and continue to monitor the situation to ensure that the controls remain effective and that any underlying issues are identified and addressed.

should be B

I would go for B - Root cause required before it gets worse

Agree with the provided answer because the question highlighted - due to built-in redundancy and fault-tolerant architecture - which means control is working well?

Both B and D are correct, as both things should be concluded by the Risk Practitioner. Anyhow, B is a more important conclusion - as sth might be happening and it needs to be checked, before the problem arises big enough for the controls... not to be enough ;)

I also thought B but then the Q is not asking how to solve it. It is stating about what the conclusion should be. And that is funny based on the answers given. Yes, controls are effective but other times, they talk about finding the root cause of the problem.

agree with B

I believe B is the better answer

not B?