CRISC: Certified in Risk and Information Systems ControlDemo

Question

Management has concluded that remediating exposures in the current IT control environment will require significant time. Which of the following is the BEST course of action?

A Reassess the risk periodically.
B Improve project management methodology.
C Implement control monitoring.
D Identify compensating controls.

Explanation

Compensating controls provide alternative safeguards that mitigate exposure while the deficient or unavailable primary controls are being remediated. They directly reduce interim risk when remediation cannot be completed promptly.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1175

Community Discussion