Certified in Risk and Information Systems Control (CRISC) — Question 296

Which of the following should be the PRIMARY consideration when assessing the automation of control monitoring?

Answer options

• A. Frequency of failure of control
• B. Contingency plan for residual risk
• C. Cost-benefit analysis of automation
• D. Impact due to failure of control

Correct answer: C

Explanation

The correct answer is C because a cost-benefit analysis of automation helps determine if the benefits of automating control monitoring outweigh the costs involved. Options A and D, while important, focus on the risks associated with control failures rather than the overall efficiency and value of automation. Option B addresses residual risks but does not directly relate to the decision-making process for automation.