Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CRISC Exam - Topic 2 Question 6 Discussion

A risk practitioner notices a trend of noncompliance with an IT-related control. Which of the following would BEST assist in making a recommendation to management?
A) Assessing the degree to which the control hinders business objectives
B) Reviewing the IT policy with the risk owner
C) Reviewing the roles and responsibilities of control process owners
D) Assessing noncompliance with control best practices

Isaca CRISC Exam - Topic 2 Question 6 Discussion

Actual exam question for Isaca's CRISC exam
Question #: 6
Topic #: 2
[All CRISC Questions]

A risk practitioner notices a trend of noncompliance with an IT-related control. Which of the following would BEST assist in making a recommendation to management?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Vincent at May 06, 2022, 01:58 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Launa
8 months ago
Surprised that no one mentioned D, it’s crucial to know the best practices!
upvoted 0 times
...
Rebeca
9 months ago
Really? I doubt A is the best choice here.
upvoted 0 times
...
Gracia
9 months ago
I think B could be just as important, though.
upvoted 0 times
...
Alexis
9 months ago
Totally agree, A makes the most sense!
upvoted 0 times
...
Long
9 months ago
A is key for aligning controls with business goals.
upvoted 0 times
...
Caprice
9 months ago
I feel like assessing noncompliance with control best practices, like in option D, could provide insights, but it might not address the root cause of the issue.
upvoted 0 times
...
Walker
9 months ago
I practiced a similar question where assessing roles and responsibilities was key. I wonder if option C could also be relevant here.
upvoted 0 times
...
Keith
9 months ago
I'm not entirely sure, but I think reviewing the IT policy with the risk owner could clarify why there's noncompliance. That sounds like option B.
upvoted 0 times
...
Chanel
9 months ago
I remember discussing how understanding business objectives can really help prioritize controls, so option A might be the best choice.
upvoted 0 times
...
Stacey
9 months ago
I'm a bit confused by this question. If the dispatch folder isn't present on the search head, how would the user be able to view the search results at all? Option B seems to make the most sense to me.
upvoted 0 times
...
Rosalia
9 months ago
I'm a little confused by the wording of the options. I'll need to re-read them a few times to make sure I understand the distinctions between them.
upvoted 0 times
...
Lindsey
10 months ago
I feel pretty confident about this one. The Optimsolv staff need to be on board with the compliance changes, so the best approach is to highlight how it can benefit them directly, like option B suggests.
upvoted 0 times
...

Save Cancel