Exam CRISC topic 1 question 912 discussion

C. accounts without documented approval. Monitoring the percentage of user accounts without documented approval provides a direct measure of whether the organization's provisioning practices are being followed. User account provisioning should typically involve a formal approval process to ensure that only authorized individuals have access to the system. Accounts without documented approval could indicate a breakdown in this process and may represent a security and compliance risk.

Agree it is C. Provisioning is tied to C and D, with C being more serious. A and B would be account maintenance or deprovisioning/offboarding.

C is the option here.

User account provisioning is a critical component of information security and involves creating and managing user accounts to ensure that only authorized individuals have access to an organization's systems and data. To monitor adherence to user account provisioning practices, it is important to track the percentage of accounts that have been created without proper approval. This can include accounts that belong to former personnel or accounts that have been created without documented approval from the appropriate personnel.

Question is on account provisioning, A is right KP for account de-provisioning

A is right KPI , C is KRI

Accounts without documented approval is more serious. So I choose C