CRISC: Certified in Risk and Information Systems ControlDemo

Question

A recent risk workshop identified risk owners and response actions for newly discovered risk scenarios. What should the risk practitioner do NEXT?

A Identify resources for implementing responses.
B Prepare a business case for the response options.
C Update the risk register with the results.
D Develop a mechanism for monitoring residual risk.

Explanation

The risk register is the central record of identified risk scenarios and should capture the responsible risk owner and the proposed remediation or response plan. Once owners and responses have been identified, those decisions must be documented in the register; implementation resourcing and residual-risk monitoring follow later in the response lifecycle.

Learn more

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ400

Community Discussion