Certified in Risk and Information Systems Control (CRISC) — Question 156

What is the FIRST phase of IS monitoring and maintenance process?

Answer options

• A. Report result
• B. Prioritizing risks
• C. Implement monitoring
• D. Identifying controls

Correct answer: D

Explanation

The first step in the IS monitoring and maintenance process is Identifying controls, as this establishes the framework for what needs to be monitored. The other options, such as Report result, Prioritizing risks, and Implement monitoring, occur after control identification and are dependent on it.