QuestionQ210
Entity ScopingA control objective has been associated with a risk statement, and both have been scoped to the same entity type. What can we expect to happen?
- A Risks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.
- B A control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.
- C The control objective will be marked as compliant since it is mitigating the related risk statement.
- D Risk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.
Community Discussion