Exam CRISC topic 1 question 1851 discussion

Actual exam question from Isaca's CRISC

Question #: 1851
Topic #: 1

[All CRISC Questions]

Which of the following events is MOST likely to trigger the need to conduct a risk assessment?

A. Introduction of a new product line
B. An incident resulting in data loss
C. Changes in executive management
D. Updates to the information security policy

Show Suggested Answer

Suggested Answer: B 🗳️

by Rozitas at Nov. 25, 2024, 11:24 a.m.

Comments

Submit Cancel

kaixin

1 week, 6 days ago

Selected Answer: A

A. Risk assessments should be conducted: -At the start of significant changes (e.g., new products, services, processes) -On a scheduled basis -After major events, but mainly to update existing risk posture — not as the primary reason for assessment B would typically trigger an incident response, a root cause analysis, or a post-incident review.

upvoted 1 times

...