Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I choose D, measure the effectiveness of the control when there is changes in the risk profile > from the KRI. B. comparison of security incident before and after software installation - not accurate, what if there was no security incident before?
I chose B, simply because I knew the answer beforehand already. But in fact, I would choose D. A lower KRI indicates a lower risk which may be caused by the implementation of the access control software. Security incidents can be caused other than access right violations - therefore, answer B is too narrow to me.
B is the correct answer