CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ75

VerifiedInformation Security Risk Management

Which action is the BEST course if a business activity’s residual risk is below the acceptable risk level?

Explanation

When residual risk is within the acceptable level, controls should be monitored for continuing effectiveness so the risk remains acceptable.

Community Discussion

No comments yet. Be the first to start the discussion!