Certified in Risk and Information Systems Control (CRISC) — Question 849

A risk practitioner is presenting the risk profile to management, indicating an increase in the number of successful network attacks. This information would be
MOST helpful to:

Answer options

• A. determine the availability of network resources.
• B. justify additional controls.
• C. justify investing in a log collection system.
• D. determine the frequency of monitoring.

Correct answer: B

Explanation

The correct answer is B because an increase in successful network attacks clearly indicates a need for additional controls to mitigate the risk. The other options, while relevant to network security, do not directly address the need for enhanced controls in response to the increased attacks.