Exam CRISC topic 1 question 665 discussion

A. Percentage of unpatched IT assets Monitoring the percentage of unpatched IT assets is the best key performance indicator (KPI) for assessing the effectiveness of the IT asset management process. Here's why: Security Relevance: Unpatched IT assets pose a significant security risk. By tracking the percentage of unpatched assets, an organization can directly measure its vulnerability to security threats. Operational Efficiency: Ensuring that all IT assets are regularly patched and up-to-date is a fundamental aspect of IT asset management. Monitoring this metric helps assess how efficiently this process is being carried out. Compliance: Many compliance standards and regulations require organizations to maintain up-to-date software and security patches. Monitoring this KPI can help demonstrate compliance with such requirements. Risk Reduction: Reducing the percentage of unpatched assets aligns with risk reduction objectives, which is a core goal of IT asset management.

D is KRI, not KPI. going with C

Agree it is D.

should be D

C is just number and tells nothing about the performance. D is the answer.

seems like the correct answer. A, for patch management, B, it's the first step in the lifecycle, but C, last step in asset management, D... is a lack of performance indicator (if LKPI :p)

Seems to me D is the answer