Certified in Risk and Information Systems Control (CRISC) — Question 979

An organization has allowed several employees to retire early in order to avoid layoffs. Many of these employees have been subject matter experts for critical assets. Which type of risk is MOST likely to materialize?

Answer options

• A. Unauthorized access
• B. Confidentiality breach
• C. Intellectual property loss
• D. Institutional knowledge loss

Correct answer: D

Explanation

The correct answer is D, as the early retirement of subject matter experts leads to a significant loss of institutional knowledge that is critical for operations. While unauthorized access, confidentiality breaches, and intellectual property loss are also risks, they are less directly impacted by the retirement of knowledgeable employees.