CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ472

Risk Optimization

What is the BEST criterion for prioritizing IT risk remediation when resource requirements are the same?

  • A IT audit recommendations
  • B Impact on business
  • C IT strategy alignment
  • D Deviation from IT standards
Explanation

IT risk remediation should be prioritized by business impact because it reflects the potential organizational consequences of the risk and therefore best supports risk-based allocation of limited remediation effort.

Community Discussion

No comments yet. Be the first to start the discussion!