ExamGecko
Search Search Login
Home Home / Isaca / IT Risk Fundamentals
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following is used to estimate the frequency and magnitude of a given risk scenario?
An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone. Which risk response strategy has the organization selected?
Which of the following is the PRIMARY concern with vulnerability assessments?
Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?
Which of the following statements on an organization's cybersecurity profile is BEST suited for presentation to management?
Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?
Which of the following is the MAIN objective of governance?
Which of the following would be considered a cyber-risk?
Which of the following is of GREATEST concern when aggregating risk information in management reports?
The MOST important reason to monitor implemented controls is to ensure the controls:

Question 58 - IT Risk Fundamentals discussion

Report
Export

An enterprise recently implemented multi-factor authentication. During the most recent risk assessment, it was determined that cybersecurity risk is within the organization's risk appetite threshold. What is the MOST appropriate action for the organization to take regarding the remaining cybersecurity residual risk?

A.

Accept

Answers
A.

Accept

B.

Mitigate

Answers
B.

Mitigate

C.

Transfer

Answers
C.

Transfer

Suggested answer: A

Explanation:

Context of Multi-Factor Authentication:

Multi-Factor Authentication (MFA) adds layers of security and significantly reduces cybersecurity risks by requiring multiple forms of verification before granting access.

Understanding Residual Risk:

Residual risk is the remaining risk after controls have been implemented. If the risk assessment shows that the residual risk is within the organization's risk appetite, it means the organization is willing to accept this level of risk.

Risk Response Strategies:

Accept: Recognize the risk and do not take any further action to mitigate it because it is within acceptable limits.

Mitigate: Take additional measures to further reduce the risk, which is unnecessary if it is already within acceptable levels.

Transfer: Shift the risk to another party, such as through insurance, which might be unnecessary if the risk is already acceptable.

Conclusion:

Since the residual risk is within the organization's risk appetite, the appropriate action is to Accept this residual risk, indicating no further mitigation is needed.

Show Answer
asked 18/11/2024
Jorge Andres Gutierrez
30 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms