IT Risk Fundamentals

By Isaca · Question Mode

QuestionQ58

Risk Governance and Management

If the residual risk related to a specific control falls within the enterprise risk appetite, it should be:

Explanation

Residual risk within the approved risk appetite is at a level the enterprise is willing to tolerate. It should be formally accepted and recorded in the risk register for ongoing visibility and monitoring.

Community Discussion

No comments yet. Be the first to start the discussion!