BCS CISMP-V9 Exam - Topic 1 Question 52 Discussion

Actual exam question for BCS's CISMP-V9 exam

Question #: 52
Topic #: 1

[All CISMP-V9 Questions]

In order to maintain the currency of risk countermeasures, how often SHOULD an organisation review these risks?

AOnce defined, they do not need reviewing.

BA maximum of once every other month.

CWhen the next risk audit is due.

DRisks remain under constant review.

Show Suggested Answer

Suggested Answer: B

by Regenia at Feb 04, 2023, 08:20 AM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joesph

4 months ago

Reviewing only during audits seems risky to me.

upvoted 0 times

...

Elliott

4 months ago

Surprised anyone would think risks don’t need regular checks!

upvoted 0 times

...

Carrol

4 months ago

I think every other month is too infrequent.

upvoted 0 times

...

Loren

4 months ago

Totally agree, constant review is key!

upvoted 0 times

...

Rosendo

4 months ago

Risks should be reviewed regularly, not just once.

upvoted 0 times

...

Casie

5 months ago

I feel like option D makes the most sense, but I wonder if there are specific guidelines on how often that should happen.

upvoted 0 times

...

Hyman

5 months ago

I vaguely recall that risks should be reassessed whenever there's a significant change, but I can't remember if that means constant review or just during audits.

upvoted 0 times

...

Shenika

5 months ago

I think we practiced a question similar to this, and I feel like risks should be reviewed at least quarterly, but I'm not sure which option that aligns with.

upvoted 0 times

...

Temeka

5 months ago

I remember discussing how risks should be reviewed regularly, but I'm not sure if "constant review" is too much.

upvoted 0 times

...

Ah, I think I've got it. The bank is using the email address provided by the applicant, so they don't need additional consent to send the notice that way. The tricky part is whether that's sufficient, or if they still need to send a paper notice.

upvoted 0 times

...

Arleen

5 months ago

Okay, let me break this down. Disintermediation is the key here - it's about removing the middleman and having lenders directly fund borrowers. I'm pretty confident that's the right answer.

upvoted 0 times

...

Gwenn

5 months ago

The level of inventory seems important, but I'm hesitant. I remember a case study where even low inventory levels didn't hinder customer satisfaction.

upvoted 0 times

...

Rene

5 months ago

Hmm, I'm a bit unsure about this one. I'll have to think it through carefully. Scheduler, Workflow, and Launcher all seem like possible options.

upvoted 0 times

...

Mari

9 months ago

Constant review? That's music to my ears! I'm just imagining the risk management team with their binoculars and walkie-talkies, keeping a 24/7 eye on those risks. Gotta love that attention to detail!

upvoted 0 times

Stephania

8 months ago

D) Risks remain under constant review.

upvoted 0 times

...

Jesse

8 months ago

B) A maximum of once every other month.

upvoted 0 times

...

Kyoko

8 months ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

Thad

10 months ago

Risks remain under constant review? That's more like it! I mean, who wants to leave their organization's security up to chance? Oh wait, some of these other answers do...

upvoted 0 times

Rosendo

8 months ago

B) A maximum of once every other month.

upvoted 0 times

...

Coral

8 months ago

C) When the next risk audit is due.

upvoted 0 times

...

Corazon

8 months ago

D) Risks remain under constant review.

upvoted 0 times

...

Evan

8 months ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

Nada

8 months ago

D) Risks remain under constant review.

upvoted 0 times

...

Essie

8 months ago

C) When the next risk audit is due.

upvoted 0 times

...

Cecily

8 months ago

B) A maximum of once every other month.

upvoted 0 times

...

Cruz

8 months ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

Barbra

10 months ago

When the next risk audit is due? So, every 5 years? I'd like to buy the person who came up with that answer a crystal ball, because that's the only way they're gonna know when the next audit is coming.

upvoted 0 times

Wynell

9 months ago

D) Risks remain under constant review.

upvoted 0 times

...

Vincent

10 months ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

Isabelle

10 months ago

I disagree, I think risks only need to be reviewed when the next risk audit is due.

upvoted 0 times

...

Adelaide

10 months ago

I agree with Otis, constant review is important to keep up with changing threats.

upvoted 0 times

...

Gladis

10 months ago

A maximum of once every other month? That's like checking the expiration date on your milk once a year. Doesn't seem like the best risk management strategy to me.

upvoted 0 times

...

Otis

11 months ago

I think risks should remain under constant review.

upvoted 0 times

...

Lamonica

11 months ago

Once defined, they do not need reviewing? Really? I guess the organization just hopes the risks will magically disappear on their own. Good luck with that!

upvoted 0 times