ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 552 - CGEIT discussion

Report
Export

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

A.

cost burden to achieve compliance.

Answers
A.

cost burden to achieve compliance.

B.

readiness of IT systems to address the risk.

Answers
B.

readiness of IT systems to address the risk.

C.

risk profile of the enterprise.

Answers
C.

risk profile of the enterprise.

D.

disruption to normal business operations.

Answers
D.

disruption to normal business operations.

Suggested answer: C

Explanation:

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should first consider the risk profile of the enterprise. Understanding the overall risk landscape, including existing vulnerabilities, threats, and the impact of potential risks, provides a foundation for evaluating how new regulatory requirements will affect the organization. This initial step ensures that subsequent risk management efforts, including compliance activities, are aligned with the enterprise's risk appetite and strategic objectives. While cost, system readiness, and operational disruption are important considerations, they should be evaluated in the context of the enterprise's risk profile.

asked 18/11/2024
Tiziano Riezzo
47 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first