BCS Exam CISMP-V9 Topic 1 Question 52 Discussion

Actual exam question for BCS's CISMP-V9 exam

Question #: 52
Topic #: 1

[All CISMP-V9 Questions]

In order to maintain the currency of risk countermeasures, how often SHOULD an organisation review these risks?

AOnce defined, they do not need reviewing.

BA maximum of once every other month.

CWhen the next risk audit is due.

DRisks remain under constant review.

Show Suggested Answer

Suggested Answer: B

by Regenia at Feb 04, 2023, 08:20 AM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barbra

4 days ago

When the next risk audit is due? So, every 5 years? I'd like to buy the person who came up with that answer a crystal ball, because that's the only way they're gonna know when the next audit is coming.

upvoted 0 times

...

Isabelle

4 days ago

I disagree, I think risks only need to be reviewed when the next risk audit is due.

upvoted 0 times

...

Adelaide

5 days ago

I agree with Otis, constant review is important to keep up with changing threats.

upvoted 0 times

...

Gladis

5 days ago

A maximum of once every other month? That's like checking the expiration date on your milk once a year. Doesn't seem like the best risk management strategy to me.

upvoted 0 times

...

Otis

6 days ago

I think risks should remain under constant review.

upvoted 0 times

...

Lamonica

8 days ago

Once defined, they do not need reviewing? Really? I guess the organization just hopes the risks will magically disappear on their own. Good luck with that!

upvoted 0 times

...