CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1538

Risk Assessment

Which of the following is the primary reason for conducting ongoing risk assessments?

  • A The risk environment is subject to change.
  • B The information security budget must be justified.
  • C Emerging risk must be continuously reported to management.
  • D New system vulnerabilities emerge at frequent intervals.
Explanation

Risk assessments must be performed on an ongoing basis because the risk environment changes over time.

Community Discussion

No comments yet. Be the first to start the discussion!