Certified in Risk and Information Systems Control (CRISC) — Question 207

An application runs a scheduled job that compiles financial data from multiple business systems and updates the financial reporting system. If this job runs too long, it can delay financial reporting. Which of the following is the risk practitioner's BEST recommendation?

Answer options

• A. Implement database activity and capacity monitoring.
• B. Consider providing additional system resource to this job.
• C. Ensure the enterprise has a process to detect such situations.
• D. Ensure the business is aware of the risk.

Correct answer: D

Explanation

The best recommendation is to ensure the business is aware of the risk, as this allows for informed decision-making and prioritization of resources. While monitoring and additional resources can help, they do not address the fundamental need for awareness and understanding of the risk involved. Without awareness, stakeholders may not take the necessary actions to mitigate the risk effectively.