Certified in Risk and Information Systems Control (CRISC) — Question 1004

Which of the following is the BEST way to confirm whether appropriate automated controls are in place within a recently implemented system?

Answer options

• A. Conduct user acceptance testing
• B. Perform a post-implementation review
• C. Interview process owners
• D. Review the key performance indicators (KPIs)

Correct answer: B

Explanation

The correct answer, B, is the best approach because a post-implementation review systematically evaluates the effectiveness and adequacy of the automated controls. Options A, C, and D may provide insights but do not comprehensively assess the controls like a post-implementation review does.