MENU
An organization is considering outsourcing user administration controls tor a critical system. The potential vendor has offered to perform quarterly sett-audits of its controls instead of having annual independent audits. Which of the following should be of GREATEST concern to me risk practitioner?
Suggested Answer: A
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
RE
Ressie
11 months ago
Not sure about this vendor's reliability, seems like a gamble.
RO
Roy
12 months ago
Best practices are crucial, but I think quarterly could work if done right.
HA
Hana
12 months ago
Wait, are they really going to skip the annual audits? That’s a huge red flag!
MO
Mose
12 months ago
I agree, annual audits are way more thorough.
JO
Johana
1 year ago
Quarterly audits sound risky, not enough time to catch issues.
RE
Reena
1 year ago
I practiced a question similar to this, and I think the lack of a risk-based approach, option D, could really compromise security.
SH
Shannon
1 year ago
I'm not entirely sure, but I think option B could be a big issue since control failures could lead to serious risks.
JO
Joanna
1 year ago
I remember discussing how quarterly audits might not be as thorough as annual ones, so I'm leaning towards option A.
BR
Brice
1 year ago
I feel like best practices are important, but I'm not confident if that's the biggest concern here. Maybe option C isn't the main issue?
CA
Carin
1 year ago
Okay, this is a tricky one. I'll need to really dive into the numbers and think critically about which company has the "worst" ratios compared to the others. Gotta stay focused and not get bogged down in the details.
RI
Rikki
1 year ago
Verifiability seems like the most likely answer here. We need to be able to independently verify the information, so that would require the most agreement.
TO
Tori
1 year ago
I'm a bit confused by this question. The code doesn't seem to be provided, so it's hard to know exactly what the issue is. I'll have to think through the different options and try to determine which one would resolve the compilation error.
CY
Cyndy
1 year ago
I'm a little confused on this one. Is the change log the right answer, or is it something else like the issue log or change requests? I'll have to think it through carefully.