CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ954

Risk Assessment

Which of these events is MOST likely to prompt an update to the risk register?

  • A A reminder to reassess an identified risk has been sent to risk owners and risk custodians.
  • B A business case for implementing a new solution for automating controls has been proposed.
  • C A project to implement a risk response action plan has been completed and closed successfully.
  • D A post-implementation review of a new application has been initiated by senior management.
Explanation

Completion and successful closure of a project that implements a risk response action plan confirms that a planned treatment has been carried out. The related risk record should be updated to reflect the response status and any resulting residual risk.

Community Discussion

No comments yet. Be the first to start the discussion!