Certified in Risk and Information Systems Control (CRISC) — Question 52

Which of the following is MOST important for an organization that wants to reduce IT operational risk?

Answer options

• A. Decentralizing IT infrastructure.
• B. Increasing the frequency of data backups.
• C. Increasing senior management's understanding of IT operations.
• D. Minimizing complexity of IT infrastructure.

Correct answer: D

Explanation

Minimizing complexity of IT infrastructure is vital as it reduces potential points of failure and enhances manageability, thereby lowering operational risk. The other options, while beneficial, do not directly address the fundamental risks posed by a complex IT environment. For instance, decentralizing infrastructure may increase risks rather than reduce them.