CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1224

Risk Response and Reporting

A key risk indicator (KRI) identifies an exception because a threshold has been exceeded, but it remains within risk appetite. What should be done NEXT?

  • A Adjust the risk threshold level to match risk appetite.
  • B Review the risk appetite level to ensure it is appropriate.
  • C Review the trend to determine whether action is needed.
  • D Document that the KRI is within risk appetite.
Explanation

A KRI threshold can provide an early warning before risk exceeds the approved appetite. When the threshold is breached but the risk remains within appetite, reviewing the trend establishes whether the exposure is worsening and whether action is needed.

Community Discussion

No comments yet. Be the first to start the discussion!