IT-RISK-FUNDAMENTALS practice question 8 of 15
Incomplete or inaccurate data may result in:
Full set: 75 questionsIntegrity risk is the risk associated with the accuracy and completeness of information, as well as its validity in accordance with business values and expectations. Incomplete or inaccurate data directly compromises data integrity, leading to flawed decision-making, incorrect reporting, and a failure to meet business or regulatory requirements. This is the most precise term for the risk arising from poor data quality.
A. Availability risk concerns data not being accessible or usable when required. While incomplete data might be unusable, the core issue is its quality, not its accessibility.
B. Relevance risk relates to data not being applicable or useful for the task at hand. While inaccurate data is not relevant, the primary attribute violated is its integrity.
1. ISACA, COBIT 2019 Framework: Governance and Management Objectives, 2018, Page 101, APO14 Managed Data. This section discusses the importance of data quality, including accuracy and completeness, as a key component of managing data and information, which directly relates to mitigating integrity risk.
2. ISACA, The Risk IT Framework, 2nd Edition, 2020, Page 45, Figure 2.10—Example IT Risk Categories. This figure lists "Data integrity" as a distinct category of IT-related risk, separate from availability.
3. ISACA, IT Risk Fundamentals Study Guide, 2nd Edition, 2020, Chapter 1, Section: Types of Risk. The guide defines integrity as a key information security property related to the accuracy and completeness of data.
Keep practicing
Take the free IT-RISK-FUNDAMENTALS practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other IT-RISK-FUNDAMENTALS practice questions
- Question 1What is the purpose of a control objective?
- Question 2What is the basis for determining the sensitivity of an IT asset?
- Question 3Which of the following is the objective of a frequency analysis?
- Question 4Which of the following risk analysis methods gathers different types of potential risk id…
- Question 5Which of the following is MOST likely to expose an organization to adverse threats?
- Question 6One of the PRIMARY purposes of threat intelligence is to understand:
