CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ14

Technology and Security

Which of the following should be the PRIMARY consideration when implementing controls to monitor user activity logs?

  • A Building correlations between logs collected from different sources
  • B Ensuring the control is proportional to the risk
  • C Implementing log analysis tools to automate controls
  • D Ensuring availability of resources for log analysis
Explanation

Security monitoring controls should be selected and tailored to be commensurate with the relevant risk and organizational risk tolerance. Log correlation, automated analysis tools, and analysis resources can improve operation of the control, but they are secondary design considerations after establishing the risk-appropriate level of control.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!