CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is the BEST key performance indicator (KPI) for measuring the maturity of an organization’s security incident-handling process?

A The number of resolved security incidents
B The number of security incidents escalated to senior management
C The number of newly identified security incidents
D The number of recurring security incidents

Explanation

A low number of recurring security incidents indicates that incident handling includes effective root-cause analysis, remediation, and lessons learned that prevent the same issues from happening again. Raw incident, resolution, or escalation counts are largely influenced by incident volume and reporting thresholds rather than process maturity.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1123

Community Discussion