CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is MOST important to review when assessing the ongoing effectiveness of the IT risk register?

A The timeframes for risk response actions
B The costs associated with mitigation options
C The cost-benefit analysis of each risk response
D The status of identified risk scenarios

Explanation

The status of identified risk scenarios keeps the risk register current by indicating whether each risk remains active, has changed, has been treated, or has been closed. This is central to maintaining an effective, reliable record of organizational IT risk.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ213

Community Discussion