CRISC: Certified in Risk and Information Systems ControlDemo

Question

A move from an internally developed system to an external cloud-based solution is affecting a previously rated key risk scenario involving payroll processing. Which component of the risk register should be updated FIRST?

A Payroll system risk factors
B Payroll system risk mitigation plans
C Payroll administrative controls
D Payroll process owner

Explanation

Risk factors define the circumstances, threats, vulnerabilities, and conditions underlying a risk scenario. Moving payroll processing to an external cloud-based solution changes those factors, so they must be updated before reassessing mitigation plans, administrative controls, or the process owner.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1738

Community Discussion