CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1065

Risk Response and Reporting

A cloud service provider has completed upgrades to its cloud infrastructure to improve service availability. Which of the following is the MOST important key risk indicator (KRI) for management to monitor?

  • A Peak demand on the cloud service during business hours
  • B Number of incidents with downtime exceeding contract threshold
  • C Percentage of servers not patched per policy
  • D Percentage of technology upgrades resulting in security breaches
Explanation

The number of incidents whose downtime exceeds the contractual threshold directly indicates whether service availability is falling outside the agreed risk tolerance. A KRI should signal material risk exposure, and downtime beyond the contracted limit is the clearest availability-risk measure following infrastructure upgrades.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!