Certified in Risk and Information Systems Control (CRISC) — Question 843

An organization striving to be on the leading edge in regard to risk monitoring would MOST likely implement:

Answer options

• A. a tool for monitoring critical activities and controls
• B. procedures to monitor the operation of controls
• C. real-time monitoring of risk events and control exceptions
• D. monitoring activities for all critical assets.

Correct answer: C

Explanation

The correct answer is C because real-time monitoring allows for immediate awareness and response to risk events and control exceptions, which is essential for maintaining a leading edge. Options A and B focus on tools and procedures that do not provide the same immediacy, and option D, while important, does not specifically address the timeliness of monitoring risk events.