CRISC Question 378

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Although current controls are maintaining continuity, the rising failure rate indicates potential underlying problems that need investigation to ensure long-term reliability this will be done by doing root cause analysis

• Chose D1

  D. Controls are effective for ensuring continuity. The risk practitioner should conclude that "D. Controls are effective for ensuring continuity." Even though hardware failure incidents have been increasing, the fact that there have been no interruptions to business operations indicates that the built-in redundancy and fault-tolerant architecture are effectively mitigating the impact of these incidents. The controls in place are ensuring business continuity and preventing disruptions despite the hardware failures. The absence of impact (option A) and the need for a root cause analysis (option B) may not be warranted in this case, as the control measures are effectively managing the situation. The conclusion that hardware needs to be upgraded (option C) is not supported by the information provided, as the existing controls have prevented interruptions without the need for immediate hardware upgrades.

• Chose B1

  I go with B