Isaca Certified in Risk and Information Systems Control CRISC Question # 208 Topic 21 Discussion
CRISC Exam Topic 21 Question 208 Discussion:
Question #: 208
Topic #: 21
An organization operates in an environment where reduced time-to-market for new software products is a top business priority. Which of the following should be the risk practitioner's GREATEST concern?
A.
Sufficient resources are not assigned to IT development projects.
B.
Customer support help desk staff does not have adequate training.
C.
Email infrastructure does not have proper rollback plans.
D.
The corporate email system does not identify and store phishing emails.
In an environment where reduced time-to-market for new software products is a top business priority, the risk practitioner’s greatest concern should be whether sufficient resources are assigned to IT development projects. Resources include human, financial, technical, and physical assets that are needed to plan, design, develop, test, and deliver high-quality software products in a timely manner. If the IT development projects are under-resourced, they may face challenges such as delays, errors, defects, rework, scope creep, or failure to meet customer expectations or requirements. These challenges can increase the risk of losing competitive advantage, market share, customer satisfaction, or reputation. The other options are less critical, as they are not directly related to the core business priority of reducing time-to-market for new softwareproducts. Customer support help desk staff training, email infrastructure rollback plans, and corporate email system phishing detection are important aspects of information security and customer service, but they are not the primary drivers of software product development anddelivery. References = Risk and Information Systems Control Study Manual, Chapter 3: IT Risk Response, Section 3.2: Risk Response Options, p. 115-116.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit