Certified in Risk and Information Systems Control (CRISC) — Question 628

Which of the following is the MOST important consideration when communicating the risk associated with technology end-of-life to business owners?

Answer options

• A. Cost and benefit
• B. Performance and productivity
• C. Maintainability and reliability
• D. Security and availability

Correct answer: D

Explanation

The correct answer is D because security and availability are critical concerns when a technology reaches its end-of-life, as outdated systems may become vulnerable to threats and may not be supported. The other options, while important, do not address the immediate risks related to security breaches and the potential impact on system availability.