Certified Information Systems Auditor CISA · Free Practice Question Medium

Question 86

You are the information system auditor of HDA Inc. You are auditing the company's systems and have noticed a continuous decline in the effectiveness of a detective control. Based on this situation, please choose the option that best describes the greatest impact resulting from this deterioration:
  • A A. High percentage of false negatives in the logs
  • B B. Increased number of false positives in the logs
  • C C. Decreased efficiency of preventive controls
  • D

    D. Higher cost of maintaining the control

Reveal correct answer

Correct answer: A

Explanation

Correct Answer: A. High percentage of false negatives in the logs Explanation: The ongoing deterioration of a detective control can have various impacts, but the greatest impact is likely to be a high percentage of false negatives in the logs. Detective controls are designed to identify and detect security incidents or violations. They generate logs or alerts when specific events or patterns of behavior are observed. A high percentage of false negatives means that the detective control is failing to identify actual incidents or violations, leading to undetected security breaches or non-compliance. This can result in significant risks to the organization, as malicious activities or policy violations go unnoticed and are not properly addressed. Increased number of false positives in the logs (Option B) may create operational challenges and additional workload, but it does not have the same level of impact as undetected incidents. The decreased efficiency of preventive controls (Option C) and higher likelihood of unauthorized access incidents (Option D) are indirect consequences of the deteriorated detective control, but they do not directly represent the greatest impact. Therefore, the GREATEST impact resulting from the ongoing deterioration of a detective control is a high percentage of false negatives in the logs.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need