CRISC: Certified in Risk and Information Systems ControlDemo

Question

A risk assessment of an organization’s architecture identifies a severe vulnerability in the middleware systems that could compromise the confidentiality of record processing. Which of the following is the risk practitioner’s BEST course of action?

A Recommend additional budget to cover the cost of an upgrade.
B Develop a remediation plan with the business process owner.
C Escalate the issue to senior management.
D Document the issue in the business impact analysis (BIA).

Explanation

A severe vulnerability affecting the confidentiality of record processing requires a risk-treatment response. Developing a remediation plan with the business process owner ensures that technical corrective actions, business impact, ownership, priorities, and resources are aligned. Escalation or funding requests may follow if required, but they are not the primary risk-response action.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1013

Community Discussion