CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ671

Risk Assessment

Which of the following is MOST likely to trigger a need for risk reassessment?

  • A Risk assessment tools have changed.
  • B Audit programs have changed.
  • C A vulnerability has been identified within the industry.
  • D The scheduled review period has passed.
Explanation

An identified vulnerability within the industry can introduce or increase relevant threats and exposures, requiring risk levels, affected assets, and control effectiveness to be reassessed.

Community Discussion

No comments yet. Be the first to start the discussion!