CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ89

Risk Response and Reporting

Which of the following approaches is an example of risk mitigation?

  • A Outsourcing the IT activities and infrastructure
  • B Taking out insurance coverage for IT-related incidents
  • C Enforcing change and configuration management processes
  • D Not providing capability for employees to work remotely
Explanation

Enforcing change and configuration management processes is a preventive control that reduces the likelihood and impact of IT incidents caused by unauthorized, untested, or poorly controlled changes.

Community Discussion

No comments yet. Be the first to start the discussion!