CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ101

VerifiedRisk Response and Reporting

Which aspect of an IT risk and control self-assessment is MOST important to include in a report for senior management?

Explanation

An increase in residual risk indicates that the organization faces greater remaining exposure after considering its controls. This is the most decision-relevant information for senior management because it may require risk acceptance, additional treatment, or escalation.

Community Discussion

No comments yet. Be the first to start the discussion!