Certified in Risk and Information Systems Control (CRISC) — Question 412

Which of the following is the MOST important data source for monitoring key risk indicators (KRIs)?

Answer options

• A. Audit reports from internal information systems audits
• B. Directives from legal and regulatory authorities
• C. Trend analysis of external risk factors
• D. Automated logs collected from different systems

Correct answer: D

Explanation

Automated logs collected from different systems are crucial for monitoring key risk indicators as they provide real-time data and insights into system activities and anomalies. In contrast, audit reports, directives from authorities, and trend analysis are important but do not offer the immediate, actionable data that automated logs provide for proactive risk management.