CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ16

VerifiedRisk Assessment

Which of the following fall within the phases of risk identification and evaluation?

Each correct answer represents a complete solution.

Choose three
Explanation

Risk identification and evaluation includes collecting data to identify risks, analyzing those risks, and maintaining a risk profile that records and supports ongoing assessment. Applying controls is part of treating or mitigating risk after evaluation.

Community Discussion

No comments yet. Be the first to start the discussion!