CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1682

Risk Response and Reporting

A risk practitioner reviews the status of an action plan intended to mitigate an emerging IT risk and determines that the risk level has increased. What is the BEST course of action?

  • A evaluate whether selected controls are still appropriate.
  • B implement the planned controls and accept the remaining risk.
  • C suspend the current action plan in order to reassess the risk.
  • D revise the action plan to include additional mitigating controls.
Explanation

An increase in risk level indicates that the existing mitigation plan does not adequately address the risk exposure. The action plan should be revised to incorporate additional mitigating controls.

Community Discussion

No comments yet. Be the first to start the discussion!