Certified in Risk and Information Systems Control (CRISC) — Question 828

Which of the following should be the FIRST step to investigate an IT monitoring system that has a decreasing alert rate?

Answer options

• A. Adjust the sensitivity to trigger more alerts.
• B. Determine the root cause for the change in alert rate.
• C. Conduct regression testing to ensure alerts can be triggered.
• D. Review and adjust the timing of the reporting window.

Correct answer: B

Explanation

The correct answer is B because identifying the root cause of the change in alert rate is essential to understand the issue before taking any corrective actions. The other options, such as adjusting sensitivity or conducting regression testing, may not address the underlying problem and could lead to ineffective solutions.