CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ974

Risk Assessment

A risk practitioner has reviewed new international regulations and recognizes that they will affect the organization. What should be the risk practitioner’s NEXT course of action?

  • A Conduct a peer response assessment.
  • B Reevaluate the risk management program.
  • C Update risk scenarios in the risk register.
  • D Ensure applications are compliant.
Explanation

Changes in legal or regulatory requirements require reassessment of risk so that affected existing risk scenarios, and any new scenarios, are identified and managed. The risk register is the repository used to document those scenarios and their treatment; ensuring application compliance is an operational control responsibility rather than the immediate risk-management action.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!