Certified in Risk and Information Systems Control (CRISC) — Question 703

An organization operates in an environment where reduced time-to-market for new software products is a top business priority. Which of the following should be the risk practitioner's GREATEST concern?

Answer options

• A. Email infrastructure does not have proper rollback plans
• B. Sufficient resources are not assigned to IT development projects
• C. The corporate email system does not identify and store phishing emails
• D. Customer support help desk staff does not have adequate training

Correct answer: B

Explanation

The greatest concern for the risk practitioner should be the allocation of sufficient resources to IT development projects, as inadequate resources can significantly delay software delivery. While the other options represent potential risks, they do not directly impact the ability to bring products to market quickly as much as resource allocation does.