Certified in Risk and Information Systems Control (CRISC) — Question 1371

Which of the following would BEST indicate to senior management that IT processes are improving?

Answer options

• A. Changes in the position in the maturity model
• B. Changes to the structure of the risk register
• C. Changes in the number of intrusions detected
• D. Changes in the number of security exceptions

Correct answer: A

Explanation

The correct answer is A because improvements in IT processes are often measured by advancements in the maturity model, which reflects the organization's capability and effectiveness. Options B, C, and D might indicate specific changes or issues but do not provide a comprehensive view of overall IT process improvement.