Certified in Risk and Information Systems Control (CRISC) — Question 383

The BEST key performance indicator (KPI) to measure the effectiveness of the security patching process is the percentage of patches installed:

Answer options

• A. successfully within the expected time frame.
• B. successfully during the first attempt.
• C. by the security administration team.
• D. without causing an unplanned system outage.

Correct answer: A

Explanation

The correct answer, A, indicates that measuring the percentage of patches installed within the expected time frame reflects the efficiency and timeliness of the patching process. Options B and C do not address the overall effectiveness of the patching process, and D, while important, does not measure the timeliness or coverage of patch installation.