Certified in Risk and Information Systems Control (CRISC) — Question 942

A control process has been implemented in response to a new regulatory requirement, but has significantly reduced productivity. Which of the following is the BEST way to resolve this concern?

Answer options

• A. Absorb the loss in productivity.
• B. Escalate the issue to senior management.
• C. Request a waiver to the requirements.
• D. Remove the control to accommodate business objectives.

Correct answer: B

Explanation

The best approach is to escalate the issue to senior management (B), as they can assess the situation and determine if adjustments can be made without violating regulations. Absorbing the loss (A) does not address the problem, while requesting a waiver (C) may not be feasible or appropriate. Removing the control (D) could lead to non-compliance and further issues.