CRISC: Certified in Risk and Information Systems ControlDemo

Question

Management has introduced two new preventive controls to address a risk identified during an audit. After the issue is closed, which item is MOST important to update in the risk register?

A Key controls
B Likelihood
C Inherent risk
D Impact

Explanation

The risk register should document the key controls that mitigate each risk. Newly implemented preventive controls change the control environment and must be recorded so that the risk’s treatment, ownership, and later assessment of control effectiveness are accurate.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ630

Community Discussion