Certified in Risk and Information Systems Control (CRISC) — Question 1448

Which of the following would be a risk practitioner's GREATEST concern related to the monitoring of key risk indicators (KRIs)?

Answer options

• A. Logs are retained for a longer duration than the data retention policy requires.
• B. Logs are encrypted during transmission from the system to analysis tools.
• C. Logs are modified before analysis is conducted.
• D. Logs are collected from a small number of systems.

Correct answer: C

Explanation

The greatest concern for a risk practitioner is that logs may be modified before analysis, which can compromise the integrity of the data and lead to incorrect conclusions. While retaining logs longer than necessary and collecting from a small number of systems are issues, they do not directly affect the accuracy of the analysis as much as altered logs do. Encryption during transmission is a protective measure, not a concern.