Certified in Risk and Information Systems Control (CRISC) — Question 646

The BEST metric to monitor the risk associated with changes deployed to production is the percentage of:

Answer options

• A. changes not requiring user acceptance testing.
• B. changes that cause incidents.
• C. changes due to emergencies.
• D. personnel that have rights to make changes in production.

Correct answer: B

Explanation

The correct answer is B because monitoring the changes that cause incidents directly reflects the impact of deployments on system stability. Options A, C, and D do not provide a clear indication of the operational risk associated with the changes themselves.