Courseiva
hardMultiple ChoiceObjective-mapped

CRISC Practice Question: A company's risk management team is evaluating…

A company's risk management team is evaluating the effectiveness of its control monitoring program. They find that many controls are tested at the same time each year, leading to a resource bottleneck. Which of the following approaches would BEST address this issue?

⚠ Common exam trap

A common mix-up: candidates choose 'Implement continuous monitoring automation' (Option C) because it sounds modern and efficient, but the question specifically asks for the BEST approach to address a resource bottleneck caused by timing, not the method of testing.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Stagger testing cycles across the year

Staggering testing cycles across the year distributes the workload evenly, preventing the resource bottleneck caused by testing all controls simultaneously. This approach optimizes resource utilization without increasing headcount or reducing coverage, directly addressing the root cause of the scheduling conflict.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Increase the testing team size

    Why it's wrong here

    Adding staff is a temporary measure and may not be sustainable.

  • Stagger testing cycles across the year

    Why this is correct

    Spreading testing evenly throughout the year reduces peak loads and optimizes resource use.

  • Implement continuous monitoring automation

    Why it's wrong here

    Automation is beneficial but may not immediately resolve the bottleneck and requires significant investment.

  • Reduce the number of controls tested

    Why it's wrong here

    Reducing controls may leave risks unmonitored.

About these practice questions

This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.