Certified Information Systems Auditor (CISA) — Question 1029

Which of the following is the GREATEST impact as a result of the ongoing deterioration of a detective control?

Answer options

• A. Increased number of false negatives in security logs
• B. Decreased effectiveness of root cause analysis
• C. Decreased overall recovery time
• D. Increased demand for storage space for logs

Correct answer: A

Explanation

The correct answer, A, is significant because an increased number of false negatives indicates that real threats may go undetected, undermining the purpose of the detective control. Option B, while important, is not as critical as failing to detect actual security incidents. Option C suggests an improvement, which contradicts the premise of deterioration, and option D, while potentially an issue, does not directly impact the detection of security events.