When analyzing risk for an information system, which type of metric provides insights only after security breaches have occurred?

Practise this CRISC IT Risk Exam Prep question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.

Download PDF Watch video

Multiple choice — select the best answer

APredictive
BPreventive
CLagging
DLeading

✓ Correct answer: C. Lagging Lagging metrics report on the impact of a security breach after it has occurred, demonstrating the consequences of such events.

.q-expl{display:block!important}.q-opt[data-idx="2"]{border-color:#16a34a;background:#f0fdf4}.q-opt[data-idx="2"] .oltr{background:#16a34a;color:#fff}.q-opt{cursor:default!important;pointer-events:none}

Keep practising. Use the free CRISC IT Risk Exam Prep PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.

Free PDF Video walkthrough

← Previous Next → 🎲 Random question ↩ Back to all questions

Keep practising

When analyzing risk for an information system, which type of metric provides insights only after security breaches have occurred?

Related questions

Free practice here. Timed mocks when you are ready.