CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is management’s PRIMARY consideration when approving risk-response action plans?

A Prioritization for implementing the action plans
B Ability of the action plans to address multiple risk scenarios
C Ease of implementing the risk treatment solution
D Changes in residual risk after implementing the plans

Explanation

Risk-response action plans must reduce risk to a residual level that management is willing to accept. The post-treatment residual risk therefore determines whether the planned response is appropriate.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1393

Community Discussion