CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ84

VerifiedRisk Assessment

After a significant change to a business process, a risk practitioner believes that the related risk has decreased. The risk practitioner should FIRST advise the risk owner to:

Explanation

A material change to a business process can alter a risk’s likelihood, impact, controls, and treatment needs. A risk analysis is needed to validate the revised risk level before changing records, indicators, or resource allocation.

Community Discussion

No comments yet. Be the first to start the discussion!