CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is the MOST important responsibility of a risk practitioner when managing risk acceptance that exceeds risk tolerance?

A Increase the risk appetite to align with the current risk level.
B Verify authorization by senior management.
C Update the risk response in the risk register.
D Ensure the acceptance is set to expire over time.

Explanation

Risk accepted above the organization’s risk tolerance must be escalated to and formally authorized by senior management or the designated authority, ensuring accountability for accepting exposure beyond approved limits.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ352

Community Discussion