CRISC: Certified in Risk and Information Systems ControlDemo

Question

How can residual risk be determined?

A By determining remaining vulnerabilities after countermeasures are in place.
B By transferring all risks.
C By threat analysis
D By risk assessment

Explanation

Residual risk is the risk that remains after controls or countermeasures have been applied; it can be determined by identifying the vulnerabilities that still remain after those measures are in place.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ458

Community Discussion