Certified in Risk and Information Systems Control (CRISC) — Question 1117

A key performance indicator (KPI) has been established to monitor the number of software changes that fail and must be re-implemented. An increase in the KPI indicates an ineffective:

Answer options

• A. preventive control.
• B. deterrent control.
• C. administrative control.
• D. corrective control.

Correct answer: D

Explanation

The correct answer is D, as corrective controls are intended to address and fix issues after they occur. An increase in failures indicates that the existing corrective measures are not effective. The other options refer to different types of controls that do not directly address the re-implementation of failed software changes.