CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1460

Risk Response and Reporting

What is the BEST method for validating whether controls have been implemented in accordance with the risk-mitigation action plan?

  • A Implement key risk indicators (KRIs)
  • B Test the control design
  • C Test the control environment
  • D Implement key performance indicators (KPIs)
Explanation

Testing the control environment provides evidence that the controls required by the risk-mitigation action plan are in place and embedded in the organization’s control structure. KRIs and KPIs monitor risk or performance, while control-design testing addresses whether a proposed control is appropriate rather than whether it has been implemented.

Community Discussion

No comments yet. Be the first to start the discussion!