Courseiva
easyMultiple ChoiceObjective-mapped

CISA Practice Question: Is the BEST indicator that an organization's…

Which of the following is the BEST indicator that an organization's incident management process is effective?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The percentage of recurring incidents is decreasing over time

A decreasing number of recurring incidents indicates that root causes are being identified and resolved, which is a key measure of incident management effectiveness. Option A focuses on resolution speed, which is not the best indicator of effectiveness; Option B may indicate better detection, not effectiveness; Option C is about logging timeliness, which is a process compliance metric, not effectiveness.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The average time to resolve incidents is under 1 hour

    Why it's wrong here

    Speed is not the same as effectiveness; if root causes are not fixed, incidents recur.

  • The number of incidents reported per month is increasing

    Why it's wrong here

    An increase may indicate more issues, not effective management.

  • All incidents are logged within 10 minutes of detection

    Why it's wrong here

    Timely logging is good practice but does not measure the effectiveness of incident resolution.

  • The percentage of recurring incidents is decreasing over time

    Why this is correct

    A reduction in recurrence shows that the process is identifying and eliminating root causes.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.