Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

BCS CISMP-V9 Exam - Topic 1 Question 52 Discussion

Actual exam question for BCS's CISMP-V9 exam

Question #: 52
Topic #: 1

[All CISMP-V9 Questions]

In order to maintain the currency of risk countermeasures, how often SHOULD an organisation review these risks?

AOnce defined, they do not need reviewing.

BA maximum of once every other month.

CWhen the next risk audit is due.

DRisks remain under constant review.

Show Suggested Answer

Suggested Answer: B

by Regenia at Feb 04, 2023, 08:20 AM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joesph

9 months ago

Reviewing only during audits seems risky to me.

upvoted 0 times

...

Elliott

9 months ago

Surprised anyone would think risks don’t need regular checks!

upvoted 0 times

...

Carrol

9 months ago

I think every other month is too infrequent.

upvoted 0 times

...

Loren

9 months ago

Totally agree, constant review is key!

upvoted 0 times

...

Rosendo

9 months ago

Risks should be reviewed regularly, not just once.

upvoted 0 times

...

Casie

10 months ago

I feel like option D makes the most sense, but I wonder if there are specific guidelines on how often that should happen.

upvoted 0 times

...

Hyman

10 months ago

I vaguely recall that risks should be reassessed whenever there's a significant change, but I can't remember if that means constant review or just during audits.

upvoted 0 times

...

Shenika

10 months ago

I think we practiced a question similar to this, and I feel like risks should be reviewed at least quarterly, but I'm not sure which option that aligns with.

upvoted 0 times

...

Temeka

10 months ago

I remember discussing how risks should be reviewed regularly, but I'm not sure if "constant review" is too much.

upvoted 0 times

...

Shenika

10 months ago

Ah, I think I've got it. The bank is using the email address provided by the applicant, so they don't need additional consent to send the notice that way. The tricky part is whether that's sufficient, or if they still need to send a paper notice.

upvoted 0 times

...

Arleen

10 months ago

Okay, let me break this down. Disintermediation is the key here - it's about removing the middleman and having lenders directly fund borrowers. I'm pretty confident that's the right answer.

upvoted 0 times

...

Gwenn

10 months ago

The level of inventory seems important, but I'm hesitant. I remember a case study where even low inventory levels didn't hinder customer satisfaction.

upvoted 0 times

...

Rene

10 months ago

Hmm, I'm a bit unsure about this one. I'll have to think it through carefully. Scheduler, Workflow, and Launcher all seem like possible options.

upvoted 0 times

...

Mari

1 year ago

Constant review? That's music to my ears! I'm just imagining the risk management team with their binoculars and walkie-talkies, keeping a 24/7 eye on those risks. Gotta love that attention to detail!

upvoted 0 times

Stephania

1 year ago

D) Risks remain under constant review.

upvoted 0 times

...

Jesse

1 year ago

B) A maximum of once every other month.

upvoted 0 times

...

Kyoko

1 year ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

...

Thad

1 year ago

Risks remain under constant review? That's more like it! I mean, who wants to leave their organization's security up to chance? Oh wait, some of these other answers do...

upvoted 0 times

Rosendo

1 year ago

B) A maximum of once every other month.

upvoted 0 times

...

Coral

1 year ago

C) When the next risk audit is due.

upvoted 0 times

...

Corazon

1 year ago

D) Risks remain under constant review.

upvoted 0 times

...

Evan

1 year ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

Nada

1 year ago

D) Risks remain under constant review.

upvoted 0 times

...

Essie

1 year ago

C) When the next risk audit is due.

upvoted 0 times

...

Cecily

1 year ago

B) A maximum of once every other month.

upvoted 0 times

...

Cruz

1 year ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

...

Barbra

1 year ago

When the next risk audit is due? So, every 5 years? I'd like to buy the person who came up with that answer a crystal ball, because that's the only way they're gonna know when the next audit is coming.

upvoted 0 times

Wynell

1 year ago

D) Risks remain under constant review.

upvoted 0 times

...

Vincent

1 year ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

...

Isabelle

1 year ago

I disagree, I think risks only need to be reviewed when the next risk audit is due.

upvoted 0 times

...

Adelaide

1 year ago

I agree with Otis, constant review is important to keep up with changing threats.

upvoted 0 times

...

Gladis

1 year ago

A maximum of once every other month? That's like checking the expiration date on your milk once a year. Doesn't seem like the best risk management strategy to me.

upvoted 0 times

...

Otis

1 year ago

I think risks should remain under constant review.

upvoted 0 times

...

Lamonica

1 year ago

Once defined, they do not need reviewing? Really? I guess the organization just hopes the risks will magically disappear on their own. Good luck with that!

upvoted 0 times

Latanya

1 year ago

C) When the next risk audit is due.

upvoted 0 times

...

Louis

1 year ago

True, risks are always changing so they need constant review.

upvoted 0 times

...

Carman

1 year ago

D) Risks remain under constant review.

upvoted 0 times

...

Raul

1 year ago

A) Once defined, they do not need reviewing.

upvoted 0 times

...

...