CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1167

Governance

You are the product manager in your enterprise. You have identified that new technologies, products, and services are introduced in the enterprise from time to time.

What should be done to prevent these changes from affecting the efficiency and effectiveness of controls?

  • A Receive timely feedback from risk assessments and through key risk indicators, and update controls
  • B Add more controls
  • C Perform Business Impact Analysis (BIA)
  • D Nothing, efficiency and effectiveness of controls are not affected by these changes
Explanation

Controls must be continually aligned to changes in the enterprise’s risk profile. Timely risk-assessment feedback and key risk indicators reveal changed or emerging risks, allowing controls to be updated so they remain both effective and efficient. ISACA guidance describes monitoring and analyzing KRIs to identify changes or trends and reviewing control-assessment results to determine control effectiveness.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!