CRISC Certified in Risk and Information Systems Control – Question846

Which of the following is MOST important for an organization that wants to reduce IT operational risk?

A.
Decentralizing IT infrastructure.
B. Increasing the frequency of data backups.
C. Increasing senior management’s understanding of IT operations.
D. Minimizing complexity of IT infrastructure.

Correct Answer: C