Section: Volume D

Ensuring that database changes are correctly applied is the primary reason for monitoring activities performed in a production database environment, as it helps to maintain the integrity, availability, and performance of the database and the applications that depend on it. Database changes are any modifications made to the database structure, configuration, data, or code, such as adding or deleting tables, columns, indexes, or triggers, updating or inserting data, or altering stored procedures or functions. Database changes can have significant impacts on the database functionality and behavior, and may introduce errors, inconsistencies, or vulnerabilities if not applied correctly. Therefore, monitoring database changes is essential to verify that the changes are implemented as intended, comply with the design specifications and standards, and do not cause any adverse effects or conflicts with the existing database or application components.
The other options are not the primary reasons for monitoring activities performed in a production database environment. Enforcing that changes are authorized is an important aspect of database change management, but it is not the main purpose of database monitoring. Database change management is the process of planning, reviewing, approving, and implementing database changes in a controlled and consistent manner.
Database change management helps to ensure that the changes are authorized by the appropriate stakeholders, aligned with the business requirements and objectives, and documented and communicated to the relevant parties. Database monitoring can support database change management by providing information and feedback on the change implementation and performance, but it does not enforce the change authorization.
Deterring illicit actions of database administrators is a possible benefit of database monitoring, but it is not the primary reason for it. Database administrators are the users who have the highest level of access and privilege to the database, and they are responsible for managing and maintaining the database operations and security.
Database monitoring can help to deter illicit actions of database administrators by tracking and auditing their activities and actions on the database, and alerting or escalating any suspicious or malicious behavior.
However, database monitoring is not the only or the most effective way to prevent or detect illicit actions of database administrators. Other measures, such as implementing the principle of least privilege, segregating duties, enforcing password policies, and encrypting data, are also necessary to protect the database from unauthorized or improper access or manipulation by database administrators or other users. Preventing system developers from accessing production data is a possible benefit of database monitoring, but it is not the primary reason for it. System developers are the users who design, develop, and test the applications that interact with the database. System developers should not have access to the production data, as it may contain sensitive or confidential information that could be compromised or misused by the developers. System developers should only use test or dummy data for their development and testing purposes. Database monitoring can help to prevent system developers from accessing production data by controlling and restricting their access and privilege to the database, and logging and reporting any unauthorized or inappropriate access attempts. However, database monitoring is not the only or the most effective way to prevent system developers from accessing production data. Other measures, such as implementing access control policies, masking or anonymizing data, and isolating development and production environments, are also necessary to safeguard the production data from system developers or other users. References = Database Monitoring: Basics & Introduction | Splunk, IT Risk Resources | ISACA, Best Practices for Database Performance Monitoring

According to the CRISC Review Manual, the primary reason to periodically review key performance indicators (KPIs) is to identify trends, because it helps to monitor the changes and patterns in the performance and effectiveness of the risk management processes and controls. KPIs are metrics that measure the achievement of the objectives and targets of the risk management activities. Periodically reviewing KPIs allows the organization to evaluate the progress and results of the risk management strategies and actions, and to identify any gaps, issues, or opportunities for improvement. The other options are not the primary reason to periodically review KPIs, as they are related to other aspects or outcomes of the risk management process.
Ensuring compliance is the reason to review key risk indicators (KRIs), which are metrics that measure the level of risk exposure and the occurrence of risk events. Promoting a risk-aware culture is the reason to review key goal indicators (KGIs), which are metrics that measure the alignment of the risk management with the business goals and values. Optimizing resources needed for controls is the reason to review key control indicators (KCIs), which are metrics that measure the efficiency and adequacy of the risk controls. References = CRISC Review Manual, 7th Edition, Chapter 3, Section 3.3.2, page 143.