Certified Information Systems Auditor (CISA) — Question 390

Which of the following BEST indicates that an incident management process is effective?

Answer options

• A. Decreased number of calls to the help desk
• B. Increased number of incidents reviewed by IT management
• C. Decreased time for incident resolution
• D. Increased number of reported critical incidents

Correct answer: C

Explanation

The correct answer, C, signifies that the incident management process is effective because it shows that incidents are being resolved more quickly. Options A and D do not necessarily reflect the effectiveness of the management process, as fewer calls or more reported incidents could happen for various reasons unrelated to process efficiency. Option B, while indicating increased oversight, does not directly measure the success of incident resolution.