List of questions
Related questions
Question 325 - CRISC discussion
During the control evaluation phase of a risk assessment, it is noted that multiple controls are ineffective. Which of the following should be the risk practitioner's FIRST course of action?
A.
Recommend risk remediation of the ineffective controls.
B.
Compare the residual risk to the current risk appetite.
C.
Determine the root cause of the control failures.
D.
Escalate the control failures to senior management.
Your answer:
0 comments
Sorted by
Leave a comment first