crisc question 565 discussion

View all Certified in Risk and Information Systems Control here
back to isaca forum

Question 565 Topic 4

Topic 4
An organization has determined a risk scenario is outside the defined risk tolerance level. What should be the NEXT course
of action?

  • A. Develop a compensating control
  • B. Identify risk responses
  • C. Allocate remediation resources
  • D. Perform a cost-benefit analysis
Answer:

A

User Votes:
A
50%
B 2 votes
50%
C
50%
D
50%
Discussions
0 / 1000
joeram52
2 days, 12 hours ago

Answer should be B.

0