Exin ISMP Exam - Topic 1 Question 17 Discussion

Actual exam question for Exin's ISMP exam

Question #: 17
Topic #: 1

[All ISMP Questions]

An employee has worked on the organizational risk assessment. The goal of the assessment is not to bring residual risks to zero, but to bring the residual risks in line with an organization's risk appetite.

When has the risk assessment program accomplished its primary goal?

AOnce the controls are implemented

BOnce the transference of the risk is complete

CWhen decision makers have been informed of uncontrolled risks and proper authority groups decide to leave the risks in place

DWhen the risk analysis is completed

Show Suggested Answer

Suggested Answer: C

by Jerry at Jun 27, 2022, 09:09 AM

Limited Time Offer

25%

Off

Get Premium ISMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Herminia

3 months ago

D is just about completing the analysis, not the goal of the program.

upvoted 0 times

...

Coleen

3 months ago

Wait, can we really just leave risks in place? That sounds risky!

upvoted 0 times

...

Yvonne

3 months ago

A seems too simplistic; controls alone don't mean risks are managed.

upvoted 0 times

...

Hildegarde

3 months ago

I think it's C. Decision makers need to know about the risks!

upvoted 0 times

...

Ronny

4 months ago

The goal is to align with risk appetite, not eliminate all risks.

upvoted 0 times

...

Elke

4 months ago

I feel pretty confident about this one. The goal is to bring the residual risks in line with the organization's risk appetite, not to eliminate them entirely. So the answer is option C, where the decision-makers have been informed and have decided to leave the uncontrolled risks in place.

upvoted 0 times

...

Brittani

4 months ago

This is a tricky one. I'm not entirely sure about the difference between "residual risks" and the organization's "risk appetite." I'll need to review those concepts before answering.

upvoted 0 times

...

Josephine

4 months ago

Okay, I think I've got it. The question is asking when the risk assessment program has accomplished its primary goal, which is to align the residual risks with the organization's risk appetite, not to eliminate them completely. I'll go with option C.

upvoted 0 times

...

Harrison

4 months ago

Hmm, I'm a bit confused by the wording here. Is the goal to completely eliminate the risks, or just to bring them in line with the organization's risk tolerance? I'll need to think this through carefully.

upvoted 0 times

...

Aileen

5 months ago

This seems like a straightforward question about risk assessment. I think the key is understanding the goal of the assessment, which is to align residual risks with the organization's risk appetite, not necessarily to eliminate all risks.

upvoted 0 times

...

Billye

5 months ago

I’m leaning towards D because completing the risk analysis seems like a necessary step, but I wonder if that alone is enough to say the goal is accomplished.

upvoted 0 times

...

Darrin

5 months ago

I feel like it's about understanding the risks and making informed decisions, which sounds like C again. But what if they just leave the risks as is?

upvoted 0 times

...

Audra

5 months ago

I think the goal is reached when decision makers are aware of the risks, so maybe it's option C? But I'm not entirely sure.

upvoted 0 times

...

Yuki

5 months ago

I remember a practice question that emphasized the importance of controls. Could it be A, once the controls are implemented?

upvoted 0 times

...

Yun

5 months ago

Hmm, this seems like a tricky one. I'll need to think through the different options carefully.

upvoted 0 times

...

Kenneth

5 months ago

I actually recall seeing 'domain service inventories' in our textbook. Not 100% confident, but I feel like that's the right answer!

upvoted 0 times

...

Maryann

5 months ago

This seems like a tricky one. I'll need to think carefully about the potential issues that could arise from sharing the requirements document too quickly.

upvoted 0 times

...

Roslyn

5 months ago

Wait, I'm a little confused. Is the query parameter supposed to be the "Action" that the request is performing? Or is it something else? I'll have to re-read the question and consider the options more closely.

upvoted 0 times

...