nerdexam
Isaca

CGEIT · Question #358

A large enterprise has decided to use an emerging technology that needs to be integrated with the current IT infrastructure. Which of the following is the BEST way to prevent adverse effects to the…

The correct answer is C. Develop key risk indicators (KRIs). To prevent adverse effects from integrating an emerging technology, the best approach is to develop Key Risk Indicators (KRIs) for early detection of increasing risk exposure.

Submitted by tunde_lagos· Apr 18, 2026Risk Optimization

Question

A large enterprise has decided to use an emerging technology that needs to be integrated with the current IT infrastructure. Which of the following is the BEST way to prevent adverse effects to the enterprise resulting from the new technology?

Options

  • ADevelop key performance indicators (KPIs).
  • BUpdate the risk appetite statement
  • CDevelop key risk indicators (KRIs).
  • DImplement service level agreements (SLAs)

How the community answered

(15 responses)
  • A
    7% (1)
  • C
    87% (13)
  • D
    7% (1)

Why each option

To prevent adverse effects from integrating an emerging technology, the best approach is to develop Key Risk Indicators (KRIs) for early detection of increasing risk exposure.

ADevelop key performance indicators (KPIs).

KPIs measure performance against objectives, not necessarily the potential for adverse effects or risk accumulation.

BUpdate the risk appetite statement

Updating the risk appetite statement defines the level of risk an organization is willing to take, but it doesn't prevent adverse effects; it sets the boundary for risk acceptance.

CDevelop key risk indicators (KRIs).Correct

Key Risk Indicators (KRIs) are metrics used to provide an early signal of increasing risk exposure in a particular area, such as the integration of a new technology. By monitoring KRIs, an organization can proactively identify potential adverse effects before they materialize, allowing for timely mitigation actions.

DImplement service level agreements (SLAs)

SLAs define performance expectations and remedies for service delivery, but they don't proactively prevent inherent risks associated with integrating new, potentially disruptive technology.

Concept tested: Proactive risk management

Source: https://learn.microsoft.com/en-us/industry/financial/enterprise-risk-management-strategies-for-financial-institutions-architecture-guide#enterprise-risk-indicators

Topics

#Risk Management#Key Risk Indicators#Emerging Technology#Risk Prevention

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice