What is the PRIMARY reason an organization should periodically monitor and review I&T-related risk?
I&T risk factors include internal and external contextual conditions that can affect the frequency and business impact of risk scenarios. Periodic monitoring and review identify changes in those factors so that new or changed risks can be reassessed and managed appropriately.
Community Discussion