CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ32

VerifiedRisk Assessment

A global organization has launched a project to migrate its current IT infrastructure to cloud-based products. Which action should the risk practitioner take FIRST?

Explanation

Cloud migration may create, remove, or materially change risk scenarios. The risk register should therefore be analyzed first so subsequent risk-response, control-assessment, and control-testing activities address the relevant risks.

Community Discussion

No comments yet. Be the first to start the discussion!