IsacaIsaca
CRISC · Question #244
CRISC Question #244: Real Exam Question with Answer & Explanation
The correct answer is C: Number of emergency change requests. Reviewing the number of emergency change requests is most important for confirming control effectiveness, as an increase often signals control failures or insufficient design.
Submitted by satoshi_tk· Apr 18, 2026Risk Response and Reporting
Question
When confirming whether implemented controls are operating effectively, which of the following is MOST important to review?
Options
- AResults of benchmarking studies
- BResults of risk assessments
- CNumber of emergency change requests
- DMaturity model
Explanation
Reviewing the number of emergency change requests is most important for confirming control effectiveness, as an increase often signals control failures or insufficient design.
Common mistakes.
- A. Benchmarking studies compare an organization's performance against others, which is useful for identifying areas for improvement, but less direct for confirming the operational effectiveness of currently implemented controls.
- B. Results of risk assessments identify potential risks and control gaps but do not directly confirm the operational effectiveness of controls that have already been implemented.
- D. A maturity model assesses the sophistication and capability of processes over time but does not provide specific, immediate insight into the operational effectiveness of individual controls.
Concept tested. Measuring control effectiveness via operational indicators
Topics
#Control effectiveness#Control monitoring#Operational effectiveness#Emergency change management
Community Discussion
No community discussion yet for this question.