Certified Supply Chain Professional (CSCP) Practice Exam

How can IT risk be minimized?

1. Implementing strict penalties for mistakes

2. Taking small improvements and controlling excess customization

3. Hiring more IT staff

4. Relying solely on automated systems

The correct answer is: Taking small improvements and controlling excess customization

The choice of taking small improvements and controlling excess customization is a prudent approach to minimizing IT risk for several reasons. First, incremental improvements allow organizations to implement changes in a manageable way. This means that any issues or failures can be addressed more easily as they arise, rather than dealing with the complications that might come from making large, sweeping changes all at once. This gradual approach enables better testing, evaluation, and adjustment of systems before proceeding further. Second, controlling excess customization is important because highly customized IT systems can become difficult to manage and maintain. Custom solutions may not always be compatible with standard updates or security measures, leading to vulnerabilities. By keeping customizations to a minimum, organizations can ensure that their systems remain stable, secure, and easier to update or integrate with new technologies. Overall, taking small, controlled steps helps maintain flexibility while minimizing the likelihood of unforeseen risks, thereby fostering a more resilient IT environment.