crisc question 498 discussion

View all Certified in Risk and Information Systems Control here
back to isaca forum

Question 498 Topic 4

Topic 4
Which of the following should be done FIRST when a new risk scenario has been identified?

  • A. Assess the risk awareness program
  • B. Assess the risk training program
  • C. Identify the risk owner
  • D. Estimate the residual risk
Answer:

A

User Votes:
A
50%
B
50%
C 2 votes
50%
D
50%
Discussions
0 / 1000
joeram52
2 days, 16 hours ago

Answer should be C.