ExamGecko
Search Search Login
Home Home / Isaca / IT Risk Fundamentals
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following is used to estimate the frequency and magnitude of a given risk scenario?
Which of the following is the PRIMARY concern with vulnerability assessments?
An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone. Which risk response strategy has the organization selected?
Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?
Which of the following is the MAIN objective of governance?
Which of the following would be considered a cyber-risk?
Which of the following is of GREATEST concern when aggregating risk information in management reports?
Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?
Which of the following statements on an organization's cybersecurity profile is BEST suited for presentation to management?
The MOST important reason to monitor implemented controls is to ensure the controls:

Question 55 - IT Risk Fundamentals discussion

Report
Export

Which of the following risk response strategies involves the implementation of new controls?

A.

Mitigation

Answers
A.

Mitigation

B.

Avoidance

Answers
B.

Avoidance

C.

Acceptance

Answers
C.

Acceptance

Suggested answer: A

Explanation:

Definition and Context:

Mitigation involves taking steps to reduce the severity, seriousness, or painfulness of something, often by implementing new controls or safeguards. This can include processes, procedures, or physical measures designed to reduce risk.

Avoidance means completely avoiding the risk by not engaging in the activity that generates the risk.

Acceptance means acknowledging the risk and choosing not to act, either because the risk is deemed acceptable or because there is no feasible way to mitigate or avoid it.

Application to IT Risk Management:

In IT risk management, Mitigation often involves implementing new controls such as security patches, firewalls, encryption, user authentication protocols, and regular audits to reduce risk levels.

This aligns with the principles outlined in various IT control frameworks and standards, such as ISA 315 which emphasizes the importance of controls in managing IT-related risks.

Conclusion:

Therefore, when considering risk response strategies involving the implementation of new controls, Mitigation is the correct answer as it specifically addresses the action of implementing measures to reduce risk.

Show Answer
asked 18/11/2024
Adam Bednar
38 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms