Isaca Updated CRISC Exam Questions and Answers by ernie

Several network user accounts were recently created without the required management approvals. This indicates that there is a risk of unauthorized access, use, disclosure, modification, or destruction of the network resources or data, which may affect the confidentiality, integrity, and availability of the network.

The best recommendation to address this situation is to investigate the root cause of noncompliance. This means that the risk practitioner should analyze the factors or reasons that led to the creation of the network user accounts without the required management approvals, such as human error, negligence, malice, system failure, process flaw, etc.

Investigating the root cause of noncompliance helps to identify and correct the source of the problem, prevent or reduce the recurrence of the problem, and improve the compliance and security of the network user accounts.

The other options are not the best recommendations to address this situation. They are either secondary or not effective for noncompliance.

The references for this answer are:

Risk IT Framework, page 31

Information Technology & Security, page 25

Risk Scenarios Starter Pack, page 23

Risk threshold exceptions are instances when a KRI exceeds or falls below a predefined level or point that triggers an action or a warning. An increase in the number of risk threshold exceptions indicates that the KRIs are not reflecting the current risk exposure or environment accurately oreffectively. This may suggest that the KRIs are outdated, irrelevant, or poorly defined. Therefore, the KRIs should be revised to ensure that they are aligned with the organizational objectives, risk appetite, and risk management strategy.

References

•Key Risk Indicators: A Practical Guide | SafetyCulture

•Key Risk Indicators: Examples & Definitions - SolveXia

•Choosing and Using Key Risk Indicators - Institute of Risk Management

 A recovery time objective (RTO) is the maximum acceptable time that a business process or function can be disrupted or unavailable before it causes significant damage or loss to the organization. A business continuity plan (BCP) is a document that describes how the organization will resume its critical business operations in the event of a disaster or disruption. A disaster recovery plan (DRP) is a document that describes how the organization will restore its IT systems and infrastructure in the event of a disaster or disruption. The RTO defined in the BCP and the DRP should be consistent and aligned, as they both support the continuity and recovery of the business. If the RTO defined in the BCP is shorter than the RTO defined in the DRP, it means that the BCP expects the business process or function to be restored faster than the DRP can provide. This can create a gap or a conflict between the BCP and the DRP, and can compromise the effectiveness and efficiency of the continuity and recovery efforts. Therefore, the best way for the risk practitioner to address this concern is to communicate the discrepancy to the DR manager for follow-up, meaning that the risk practitioner should report the issue and its implications to the DR manager, who is responsible for developing and maintaining the DRP. The DR manager should review the discrepancy and determine whether it is justified or not, and whether it requires any adjustment or alignment of the RTOs in the BCP and the DRP. References = Risk and Information Systems Control Study Manual, Chapter 4, Section 4.4.2, p. 206-207