CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1292

Risk Response and Reporting

What immediate action should be taken after discovering that users of a critical finance application may have excessive privileges?

  • A Recommend compensating controls be implemented.
  • B Request the service owner to perform an entitlement review.
  • C Review system logs for potentially malicious behavior.
  • D Inform the risk owner so access can be removed.
Explanation

Potentially excessive access to a critical finance application should be escalated to the risk owner immediately so the inappropriate access can be removed and the exposure reduced.

Community Discussion

No comments yet. Be the first to start the discussion!