Certified in Risk and Information Systems Control (CRISC) — Question 997

Which of the following would be an IT business owner's BEST course of action following an unexpected increase in emergency changes?

Answer options

• A. Conducting a root-cause analysis
• B. Validating the adequacy of current processes
• C. Evaluating the impact to control objectives
• D. Reconfiguring the IT infrastructure

Correct answer: A

Explanation

Conducting a root-cause analysis is crucial to identify the underlying reasons for the surge in emergency changes, making it the best course of action. Validating current processes (B) is important but comes after understanding the causes. Evaluating the impact to control objectives (C) is also relevant but does not address the immediate need to understand the increase. Reconfiguring the IT infrastructure (D) might not solve the root issue and could complicate matters further.