CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ68

Risk Response and Reporting

Which of the following is MOST important to include in regulatory and risk updates when a new legal requirement impacts the organization?

  • A Recommended key risk indicator (KRI) thresholds.
  • B Cost of changes to critical business processes.
  • C Risk associated with noncompliance.
  • D Time frame to remediate noncompliance risk.
Explanation

The primary item is the risk of noncompliance, because a legal requirement creates potential exposure to penalties, sanctions, financial loss, and reputational harm if the organization does not meet it. The other items may help manage the response but are secondary to identifying and communicating the compliance risk.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!