Certified in Risk and Information Systems Control (CRISC) — Question 182

A risk practitioner observes that hardware failure incidents have been increasing over the last few months. However, due to built-in redundancy and fault-tolerant architecture, there have been no interruptions to business operations. The risk practitioner should conclude that:

Answer options

• A. no action is required as there was no impact
• B. a root cause analysis is required
• C. hardware needs to be upgraded
• D. controls are effective for ensuring continuity

Correct answer: D

Explanation

The correct answer is D because the effective controls in place have ensured that business operations remain uninterrupted despite the increase in hardware failures. Option A is incorrect as it overlooks the underlying issue, while B suggests unnecessary analysis when the architecture is functioning properly, and C implies a need for upgrades that may not be warranted given the current situation.