IT-RISK-FUNDAMENTALS practice question 8 of 15

Incomplete or inaccurate data may result in:

Full set: 75 questions
Answer options
A: availability risk.
B: relevance risk.
C: integrity risk. Correct answer
Correct Answer:
C. integrity risk.
Explanation

Integrity risk is the risk associated with the accuracy and completeness of information, as well as its validity in accordance with business values and expectations. Incomplete or inaccurate data directly compromises data integrity, leading to flawed decision-making, incorrect reporting, and a failure to meet business or regulatory requirements. This is the most precise term for the risk arising from poor data quality.

Why Incorrect

A. Availability risk concerns data not being accessible or usable when required. While incomplete data might be unusable, the core issue is its quality, not its accessibility.
B. Relevance risk relates to data not being applicable or useful for the task at hand. While inaccurate data is not relevant, the primary attribute violated is its integrity.

References

1. ISACA, COBIT 2019 Framework: Governance and Management Objectives, 2018, Page 101, APO14 Managed Data. This section discusses the importance of data quality, including accuracy and completeness, as a key component of managing data and information, which directly relates to mitigating integrity risk.

2. ISACA, The Risk IT Framework, 2nd Edition, 2020, Page 45, Figure 2.10—Example IT Risk Categories. This figure lists "Data integrity" as a distinct category of IT-related risk, separate from availability.

3. ISACA, IT Risk Fundamentals Study Guide, 2nd Edition, 2020, Chapter 1, Section: Types of Risk. The guide defines integrity as a key information security property related to the accuracy and completeness of data.

Scroll to Top