Certified Information Systems Auditor (CISA) — Question 59

A month after a company purchased and implemented system and performance monitoring software, reports were too large and therefore were not reviewed or acted upon. The MOST effective plan of action would be to:

Answer options

• A. evaluate replacement systems and performance monitoring software.
• B. use analytical tools to produce exception reports from the system and performance monitoring software.
• C. re-install the system and performance monitoring software.
• D. restrict functionality of system monitoring software to security-related events.

Correct answer: B

Explanation

Using analytical tools to generate exception reports allows the company to focus on the most critical issues, making the data more manageable and actionable. The other options, such as replacing the software or reinstalling it, do not address the core issue of report size and will likely result in the same problem. Restricting functionality may overlook important performance metrics beyond just security events.