When reviewing management's IT control self-assessments, a risk practitioner noted an ineffective control that links to several low residual risk scenarios. What should be the NEXT course of action?

Question

Ann Nacua · Accepted Answer

Re-evaluate the risk scenarios associated with the control

Ann Nacua · Answer

Assess management's risk tolerance.

Ann Nacua · Answer

Recommend management accept the low risk scenarios.

Ann Nacua · Answer

Propose mitigating controls

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 152 - CRISC discussion

Suggested answer: D

0 comments