Isaca Certified in Risk and Information Systems Control CRISC Question # 265 Topic 27 Discussion
CRISC Exam Topic 27 Question 265 Discussion:
Question #: 265
Topic #: 27
A key performance indicator (KPI) has been established to monitor the number of software changes that fail and must be re-implemented. An increase in the KPI indicates an ineffective:
Corrective controlsare designed to correct errors or deviations after they occur. If failed changes frequently require re-implementation, this means corrective measures (e.g., testing, change rollback, error correction) are not functioning effectively.
CRISC guidance defines:
Preventive controls: stop incidents from occurring.
Detective controls: identify incidents when they occur.
Corrective controls: restore systems or data after incidents occur.
An increasing KPI (failed changes) means thecorrective mechanism is weak, henceCis the correct answer.
CRISC Reference:Domain 4 – Risk and Control Monitoring, Topic: Control Effectiveness Evaluation.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit