The PRIMARY objective for requiring an independent review of an organization's IT risk management process should be to:

Question

Steven Owens · Accepted Answer

ensure IT risk management is focused on mitigating potential risk.

Steven Owens · Answer

assess gaps in IT risk management operations and strategic focus.

Steven Owens · Answer

confirm that IT risk assessment results are expressed as business impact.

Steven Owens · Answer

verify implemented controls to reduce the likelihood of threat materialization.

List of questions