CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ75

Information Security Risk Management

Which action is the BEST course if a business activity’s residual risk is below the acceptable risk level?

  • A Update the risk assessment framework.
  • B Monitor the effectiveness of controls.
  • C Review the risk probability and impact.
  • D Review the inherent risk level.
Explanation

When residual risk is within the acceptable level, controls should be monitored for continuing effectiveness so the risk remains acceptable.

Community Discussion

No comments yet. Be the first to start the discussion!