Certified in Risk and Information Systems Control (CRISC) — Question 167

Which of the following is the PRIMARY purpose of analyzing log data collected from systems?

Answer options

• A. To identify risk that may materialize.
• B. To facilitate incident investigation.
• C. To detect changes in risk ownership.
• D. To prevent incidents caused by materialized risk.

Correct answer: A

Explanation

The primary purpose of analyzing log data is to identify potential risks before they become actual problems, which aligns with option A. While options B and D relate to incident management, they focus on responses to incidents rather than proactive risk identification. Option C is also relevant but does not reflect the primary intent of log analysis.