CRISC Question 304

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Answer A addresses impact, the more customers data you lose, the higher the fine, Answer D addresses likelihood, the more employees handling data, the more likely it is to leak. Question is asking for impact, therefore correct answer is A

• Chose A1

  A. Number of customer records held. The best input to assess the inherent risk impact of potential customer data leakage, considering heavy fines in a jurisdiction, is the "Number of customer records held." The quantity of customer records held directly correlates with the potential scale of the data breach and, consequently, the impact of such an event. More customer records mean a larger potential impact if the data is compromised. While the other options (number of databases hosting customer data, number of encrypted customer databases, number of staff members with access to customer data) are relevant in understanding different aspects of data security, the number of customer records held is the most direct indicator of the potential scale of the data breach, and it aligns with the focus on the potential for leakage of customer data, which could result in heavy fines.

• 1

  Number of customer records held: While the number of customer records held could be a useful metric to consider, it doesn't necessarily provide insight into the level of risk associated with leakage of customer data. For example, a small organization that holds a relatively small number of customer records could still be at high risk if those records contain highly sensitive information.