Isaca Certified in Risk and Information Systems Control CRISC Question # 135 Topic 14 Discussion
CRISC Exam Topic 14 Question 135 Discussion:
Question #: 135
Topic #: 14
An organization uses one centralized single sign-on (SSO) control to cover many applications. Which of the following is the BEST course of action when a new application is added to the environment after testing of the SSO control has been completed?
A.
Initiate a retest of the full control
B.
Retest the control using the new application as the only sample.
C.
Review the corresponding change control documentation
D.
Re-evaluate the control during (he next assessment
The best course of action when a new application is added to the environment after testing of the SSO control has been completed is to initiate a retest of the full control, as it may reveal any new issues or gaps that the new application may introduce to the SSO control, and ensure that the control remains effective and adequate. Retesting the control using the new application as the only sample, reviewing the corresponding change control documentation, and re-evaluating the control during the next assessment are not the best courses of action, as they may not provide sufficient assurance, evidence, or timeliness of the control testing, respectively. References = CRISC Review Manual, 7th Edition, page 154.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit