CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ591

Governance

Which of the following is the BEST key performance indicator (KPI) for determining how effectively an IT policy aligns with business requirements?

  • A Total cost of policy breaches.
  • B Total cost to support the policy.
  • C Number of exceptions to the policy.
  • D Number of inquiries regarding the policy.
Explanation

The number of exceptions to a policy is a direct indicator of whether the policy accommodates legitimate business requirements. A high number of exceptions suggests that the policy does not adequately fit operational business needs.

Community Discussion

No comments yet. Be the first to start the discussion!