IT Risk Fundamentals

By Isaca · Question Mode

QuestionQ19

Risk Assessment and Analysis

As part of an I&T-related risk assessment, which of the following should be reviewed to gain an initial view of the enterprise’s overall I&T-related risk?

Explanation

A high-level review of the risk universe provides the initial enterprise-wide perspective on I&T-related risk. Threats and vulnerabilities require more detailed analysis of individual risk factors, and remediation plans in the risk register address treatment of already documented risks.

Community Discussion

No comments yet. Be the first to start the discussion!