hardMultiple ChoiceObjective-mapped
CRISC Practice Question: A financial institution has a control that…
A financial institution has a control that manually reviews all wire transfers over $10,000. During an audit, it was found that the review is completed within 24 hours for 95% of transactions, but the target is 99%. The process owner wants to improve the control's effectiveness. Which of the following would be the MOST effective remediation?
⚠ Common exam trap
It's easy for candidates to confuse 'adding more people' (Option C) with a process improvement, when in fact automation (Option B) is the only option that removes the bottleneck of human latency and variability, directly targeting the root cause of the missed KPI.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Automate the review process using an application control.
Automating the review process with an application control directly addresses the root cause of the missed target (human delay or error) by enforcing real-time or near-real-time validation of wire transfers over $10,000. This eliminates the dependency on manual throughput and ensures consistent, timely compliance with the 99% target, as the control can be configured to block or flag transactions until automated checks are completed within the required window.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Implement a second level of approval for all wire transfers.
Why it's wrong here
Extra approval adds delay and does not address the root cause.
- ✓
Automate the review process using an application control.
Why this is correct
Automation reduces manual effort, errors, and improves timeliness.
- ✗
Increase the number of staff performing the reviews.
Why it's wrong here
Adding staff may help but is a temporary solution and increases cost.
- ✗
Adjust the target to 95% to reflect current performance.
Why it's wrong here
Lowering the target does not improve control effectiveness.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.