Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. Automated logs collected from different systems. The most important data source for monitoring key risk indicators (KRIs) is "D. Automated logs collected from different systems." Automated logs provide real-time data about various activities, events, and transactions occurring within an organization's systems and networks. Analyzing these logs allows organizations to monitor and track the performance of KRIs, providing insights into the effectiveness of controls, potential risks, and changes in the risk landscape. While the other options (audit reports, directives from legal and regulatory authorities, trend analysis of external risk factors) can also provide valuable information for risk management, automated logs offer the most immediate and detailed insights into the organization's internal activities, which are essential for monitoring KRIs effectively.
Agree D.
Agree. Automated logs collected from different systems would be the most important data source for monitoring key risk indicators (KRIs). KRIs are metrics that provide insight into the overall risk profile of an organization and are used to monitor the effectiveness of controls and the level of risk exposure. Automated logs collected from different systems can provide real-time information on events that may be indicative of a potential risk or breach. By monitoring these logs, organizations can detect potential issues early and take action to mitigate the risks.