CRISC: Certified in Risk and Information Systems ControlDemo

Question

After learning that failed back-up attempts continually exceed the current risk threshold, what should the risk practitioner do?

A keep monitoring the situation as there is evidence that this is normal.
B adjust the risk threshold to better reflect actual performance.
C inquire about the status of any planned corrective actions.
D initiate corrective action to address the known deficiency.

Explanation

Continued performance beyond an established risk threshold warrants follow-up on remediation. A risk practitioner should obtain the status of planned corrective actions, while the accountable business or process owner is responsible for implementing the corrective action itself.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1530

Community Discussion