CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1202

Risk Response and Reporting

The BEST key performance indicator (KPI) for monitoring compliance with an organization’s user-account provisioning practices is the percentage of:

  • A active accounts belonging to former personnel.
  • B accounts with dormant activity.
  • C accounts without documented approval.
  • D user accounts with default passwords.
Explanation

User-account provisioning should require documented authorization before an account is created. Measuring the percentage of accounts without documented approval directly indicates whether this provisioning control is being followed.

Community Discussion

No comments yet. Be the first to start the discussion!