Certified in Risk and Information Systems Control (CRISC) — Question 1399

Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of an anti-virus program?

Answer options

• A. Frequency of anti-virus software updates
• B. Number of alerts generated by the anti-virus software
• C. Percentage of IT assets with current malware definitions
• D. Number of false positives detected over a period of time

Correct answer: C

Explanation

The correct answer, C, is the best KPI because it directly reflects the readiness of IT assets to defend against malware with the latest definitions. Options A and B measure frequency and alerts but do not indicate actual protection effectiveness, while D looks at false positives, which doesn't necessarily correlate with the program's overall effectiveness.