CRISC: Certified in Risk and Information Systems ControlDemo

Question

A control process was implemented in response to a new regulatory requirement, but it has significantly reduced productivity. Which of the following is the BEST way to address this concern?

A Absorb the loss in productivity.
B Escalate the issue to senior management.
C Request a waiver to the requirements.
D Remove the control to accommodate business objectives.

Explanation

A productivity impact created by a control required for regulatory compliance should be escalated to senior management so it can be evaluated against the organization’s compliance obligations, risk exposure, and business objectives. Management can authorize or sponsor a compliant redesign or other appropriate response; the control should not simply be removed.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ8

Community Discussion