CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ790

Risk Response and Reporting

As part of its vendor-management program, an organization has commissioned an audit of a vendor’s control framework in order to implement compensating controls within its environment. Which risk-response option has been selected?

  • A Transfer
  • B Avoidance
  • C Acceptance
  • D Mitigation
Explanation

Risk mitigation reduces risk exposure by implementing controls, including compensating controls, that lessen the likelihood or impact of a risk.

Community Discussion

No comments yet. Be the first to start the discussion!