Certified in Risk and Information Systems Control (CRISC) — Question 198

Which of the following is of GREATEST concern when uncontrolled changes are made to the control environment?

Answer options

• A. An increase in control vulnerabilities
• B. An increase in inherent risk
• C. A decrease in control layering effectiveness
• D. An increase in the level of residual risk

Correct answer: D

Explanation

The correct answer is D because uncontrolled changes can lead to an increase in residual risk, which is the risk remaining after controls are applied. Options A, B, and C are concerns as well, but they do not reflect the most pressing issue associated with uncontrolled changes in the control environment.