CRISC: Certified in Risk and Information Systems ControlDemo

Question

When validating a risk response action plan, a risk practitioner’s PRIMARY focus should be that the risk response:

A advances business objectives.
B quantifies risk impact.
C reduces risk to an acceptable level.
D aligns with business strategy.

Explanation

A risk response action plan is effective when its controls or treatments reduce residual risk to a level the organization has defined as acceptable, consistent with its risk appetite and tolerance.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ932

Community Discussion