CRISC: Certified in Risk and Information Systems ControlDemo

Question

An organization has recently completed a major restructuring initiative to lower overhead costs by streamlining its approval hierarchy. What should the control owner do FIRST?

A Evaluate effectiveness of risk responses.
B Revise risk classifications.
C Execute control test plans.
D Analyze the control assessments.

Explanation

A significant organizational change can alter control responsibilities, approval paths, and the effectiveness of existing controls. The control owner should analyze control assessments first to identify the restructuring’s impact and any control gaps; the resulting findings guide subsequent control testing, risk classification updates, and evaluation of risk responses.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ991

Community Discussion