Certified in Risk and Information Systems Control (CRISC) — Question 364

From a risk management perspective, which of the following is the PRIMARY benefit of using automated system configuration validation tools?

Answer options

• A. Staff costs are reduced.
• B. Operational costs are reduced.
• C. Inherent risk is reduced.
• D. Residual risk is reduced.

Correct answer: D

Explanation

The correct answer is D because automated system configuration validation tools specifically help in identifying and mitigating risks that remain after controls are implemented, thereby reducing residual risk. The other options, while potentially valid in different contexts, do not directly address the primary benefit of these tools in risk management.