Certified in Risk and Information Systems Control (CRISC) — Question 1217

Which of the following BEST enables an organization to increase the likelihood of identifying risk associated with unethical employee behavior?

Answer options

• A. Conduct background checks for new employees.
• B. Establish a channel to anonymously report unethical behavior.
• C. Require a signed agreement by employees to comply with ethics policies.
• D. Implement mandatory ethics training for employees.

Correct answer: B

Explanation

Establishing a channel for anonymous reporting allows employees to safely disclose unethical behavior, thereby increasing the chances of identifying risks associated with such actions. While background checks, signed agreements, and ethics training are important, they do not provide the same immediate and confidential means for reporting misconduct as an anonymous reporting channel does.