CRISC: Certified in Risk and Information Systems ControlDemo

Question

An organization is considering changing its system to accept credit card payments. To minimize the risk of data exposure, which action should the organization take FIRST?

A Implement additional controls
B Conduct a risk assessment
C Update the risk register
D Update the security strategy

Explanation

A risk assessment identifies the threats, vulnerabilities, data flows, and potential impacts introduced by credit card payment processing. Its results inform the appropriate controls, risk-register updates, and any necessary security-strategy changes.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1098

Community Discussion