CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1281

Risk Assessment

Which of the following IS processes provide information indirectly?

Each correct answer constitutes a complete solution.

Choose three
  • A Post-implementation reviews of program changes
  • B Security log monitoring
  • C Problem management
  • D Recovery testing
Explanation

Post-implementation reviews, problem management, and recovery testing provide indirect information by assessing the results of changes, analyzing underlying causes of incidents, and validating recoverability. Security log monitoring supplies direct event evidence from system and security logs.

Community Discussion

No comments yet. Be the first to start the discussion!