CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ293

Risk Assessment

When identifying the control deficiencies that are most significant, which of the following provides the MOST useful information?

  • A Exception handling policy
  • B Benchmarking assessments
  • C Vulnerability assessment results
  • D Risk analysis results
Explanation

Risk analysis results identify the likelihood and potential impact associated with control deficiencies, enabling their significance to be prioritized based on the risk they pose.

Community Discussion

No comments yet. Be the first to start the discussion!