MENU
A risk practitioner notices a trend of noncompliance with an IT-related control. Which of the following would BEST assist in making a recommendation to management?
Suggested Answer: A
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
LA
Launa
11 months ago
Surprised that no one mentioned D, it’s crucial to know the best practices!
RE
Rebeca
12 months ago
Really? I doubt A is the best choice here.
GR
Gracia
12 months ago
I think B could be just as important, though.
AL
Alexis
12 months ago
Totally agree, A makes the most sense!
LO
Long
1 year ago
A is key for aligning controls with business goals.
CA
Caprice
1 year ago
I feel like assessing noncompliance with control best practices, like in option D, could provide insights, but it might not address the root cause of the issue.
WA
Walker
1 year ago
I practiced a similar question where assessing roles and responsibilities was key. I wonder if option C could also be relevant here.
KE
Keith
1 year ago
I'm not entirely sure, but I think reviewing the IT policy with the risk owner could clarify why there's noncompliance. That sounds like option B.
CH
Chanel
1 year ago
I remember discussing how understanding business objectives can really help prioritize controls, so option A might be the best choice.
ST
Stacey
1 year ago
I'm a bit confused by this question. If the dispatch folder isn't present on the search head, how would the user be able to view the search results at all? Option B seems to make the most sense to me.
RO
Rosalia
1 year ago
I'm a little confused by the wording of the options. I'll need to re-read them a few times to make sure I understand the distinctions between them.
LI
Lindsey
1 year ago
I feel pretty confident about this one. The Optimsolv staff need to be on board with the compliance changes, so the best approach is to highlight how it can benefit them directly, like option B suggests.