CRISC · Question #156
An organization is adopting block chain for a new financial system. Which of the following should be the GREATEST concern for a risk practitioner evaluating the system's production readiness?
The correct answer is A. Limited organizational knowledge of the underlying technology. When adopting blockchain for a new financial system, the greatest concern for a risk practitioner is the organization's limited knowledge of the underlying technology.
Question
An organization is adopting block chain for a new financial system. Which of the following should be the GREATEST concern for a risk practitioner evaluating the system's production readiness?
Options
- ALimited organizational knowledge of the underlying technology
- BLack of commercial software support
- CVarying costs related to implementation and maintenance
- DSlow adoption of the technology across the financial industry
How the community answered
(27 responses)- A56% (15)
- B26% (7)
- C11% (3)
- D7% (2)
Why each option
When adopting blockchain for a new financial system, the greatest concern for a risk practitioner is the organization's limited knowledge of the underlying technology.
A lack of internal expertise in a complex, nascent technology like blockchain significantly increases the risk of misconfiguration, insecure implementation, operational errors, and an inability to effectively monitor, manage, or respond to incidents. This fundamental knowledge gap can severely compromise the system's security and reliability, making it unready for production in a financial context.
While lack of commercial software support is a concern, internal expertise can often compensate, and many blockchain solutions are open source; it's less critical than a complete absence of understanding within the organization.
Varying costs are a business concern for budgeting and financial planning, but they do not directly impact the security or operational readiness of the system in the same fundamental way as a lack of knowledge.
Slow industry adoption is a market or strategic concern, not a direct technical risk factor that impacts the immediate production readiness, security, or stability of the system itself.
Concept tested: Technology adoption risk, blockchain implementation risks
Topics
Community Discussion
No community discussion yet for this question.