Certified in Risk and Information Systems Control (CRISC) — Question 750

A risk practitioner has become aware of production data being used in a test environment. Which of the following should be the practitioner's PRIMARY concern?

Answer options

• A. Security of the test environment.
• B. Readability of test data.
• C. Sensitivity of the data.
• D. Availability of data to authorized staff.

Correct answer: C

Explanation

The primary concern should be the sensitivity of the data since production data often contains confidential information that must be protected. While security, readability, and availability are important, they are secondary to ensuring that sensitive information is not exposed or misused in a test environment.