nerdexam
Isaca

CRISC · Question #487

Which of the following BEST enables detection of ethical violations committed by employees?

The correct answer is D. Whistleblower program. A whistleblower program is the most effective mechanism for detecting ethical violations by employees as it encourages internal reporting of misconduct that might otherwise go unnoticed.

Submitted by joshua94· Apr 18, 2026Governance

Question

Which of the following BEST enables detection of ethical violations committed by employees?

Options

  • ATransaction log monitoring
  • BAccess control attestation
  • CPeriodic job rotation
  • DWhistleblower program

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    9% (3)
  • C
    6% (2)
  • D
    82% (28)

Why each option

A whistleblower program is the most effective mechanism for detecting ethical violations by employees as it encourages internal reporting of misconduct that might otherwise go unnoticed.

ATransaction log monitoring

Transaction log monitoring can detect suspicious technical activities but might not reveal the ethical intent or context behind an action.

BAccess control attestation

Access control attestation verifies that access rights are appropriate but does not directly detect ethical violations unless they manifest as unauthorized access.

CPeriodic job rotation

Periodic job rotation is a preventative control that can reduce the opportunity for long-term fraud but does not actively detect violations once they occur.

DWhistleblower programCorrect

A whistleblower program provides a confidential and secure channel for employees to report ethical violations and misconduct without fear of retaliation, which is often the most effective way to uncover hidden internal wrongdoings. These programs leverage the internal knowledge base of employees who are often the first to observe unethical behavior that might not be detectable by technical controls alone.

Concept tested: Ethical violation detection methods

Topics

#Ethical violations#Detection controls#Whistleblower programs#Corporate ethics

Community Discussion

No community discussion yet for this question.

Full CRISC Practice