CRISC Certified in Risk and Information Systems Control – Question814

Which of the following would be a risk practitioner's GREATEST concern related to the monitoring of key risk indicators (KRIs)?

A.
Logs are retained for a longer duration than the data retention policy requires.
B. Logs are encrypted during transmission from the system to analysis tools.
C. Logs are modified before analysis is conducted.
D. Logs are collected from a small number of systems.

Correct Answer: D