Exam CRISC topic 1 question 1253 discussion

Actual exam question from Isaca's CRISC

Question #: 1253
Topic #: 1

An organization retains footage from its data center security camera for 30 days when the policy requires 90-day retention. The business owner challenges whether the situation is worth remediating. Which of the following is the risk manager’s BEST response?

A. Evaluate the risk as a measure of probable loss.
B. Identify the regulatory bodies that may highlight this gap.
C. Verify if competitors comply with a similar policy.
D. Highlight news articles about data breaches.

Show Suggested Answer

Suggested Answer: A 🗳️

by CbtL at April 29, 2023, 10:46 p.m.

Comments

Submit Cancel

K5000ism

1 year, 1 month ago

Selected Answer: B

The risk manager's best response would be to identify the regulatory bodies that govern data retention policies, as this gap in the organization's practices may result in non-compliance. Understanding and addressing regulatory requirements is critical for organizations, as failure to comply with regulations can lead to legal consequences and financial penalties.

upvoted 1 times

faed87a

4 months, 2 weeks ago

ISACA does not typically consider non-compliance with regulations as the BEST or FIRST choice. Instead, it emphasizes assessing the risk impact in relation to the organization's environment and objectives. Answer is A

upvoted 1 times

...

CbtL

1 year, 9 months ago

Selected Answer: A

Agree with A for this exam. B in the real world...

upvoted 2 times

...