CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ817

Governance

The BEST way to gain senior management support for investing in a control implementation is to articulate the reduction in:

  • A vulnerabilities.
  • B detected incidents.
  • C inherent risk.
  • D residual risk.
Explanation

Controls are risk-reducing measures, and residual risk is the portion of risk that remains after controls or other risk responses are applied. Demonstrating a reduction in residual risk directly expresses the business value of the control investment; inherent risk is the risk before management action.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!