CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ418

Risk Response and Reporting

Which of the following would BEST ensure that identified risk scenarios are addressed?

  • A Performing real-time monitoring of threats
  • B Creating a separate risk register for key business units
  • C Performing regular risk control self-assessments
  • D Reviewing the implementation of the risk response
Explanation

Reviewing implementation of the risk response verifies that the planned actions to avoid, mitigate, transfer, or accept each identified risk scenario have actually been carried out.

Community Discussion

No comments yet. Be the first to start the discussion!