Isaca Exam CRISC Topic 8 Question 68 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 68
Topic #: 8

An organization uses one centralized single sign-on (SSO) control to cover many applications. Which of the following is the BEST course of action when a new application is added to the environment after testing of the SSO control has been completed?

AInitiate a retest of the full control

BRetest the control using the new application as the only sample.

CReview the corresponding change control documentation

DRe-evaluate the control during (he next assessment

Show Suggested Answer

Suggested Answer: A

by Lashawnda at Feb 08, 2024, 12:19 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elvera

10 months ago

I think re-evaluating the control during the next assessment is a good compromise.

upvoted 0 times

...

Willard

10 months ago

We should review the change control documentation to see if any updates are needed.

upvoted 0 times

...

Elliot

11 months ago

But what if there are unforeseen issues with the new application?

upvoted 0 times

...

Shonda

11 months ago

I agree with Elvera, retesting the full control seems unnecessary.

upvoted 0 times

...

Elvera

11 months ago

I disagree, I believe testing with the new application alone is sufficient.

upvoted 0 times

...

Elliot

12 months ago

I think we should retest the full control just to be safe.

upvoted 0 times

...