A risk practitioner is reviewing the status of an action plan to mitigate an emerging IT risk and finds the risk level has increased. The BEST course of action would be to:
A.
evaluate whether selected controls are still appropriate.
B.
implement the planned controls and accept the remaining risk.
C.
suspend the current action plan in order to reassess the risk.
D.
revise the action plan to include additional mitigating controls.
Maybe all you need to reconfigure the existing controls or maybe you need to change it because its no longer effective. Adding compensating controls directly is not the correct action to take here. So the correct answer is A
upvoted 7 times
...
...
This section is not available anymore. Please use the main Exam Page.CRISC Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CbtL
9 months agoKoulyo
9 months, 2 weeks agoRaj1510
1 year, 11 months agotravdaman
2 years, 11 months agohussmohsin
2 years, 11 months ago