MENU
Which of the following should be the FIRST step when conducting an IT risk assessment?
Suggested Answer: C
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
ME
Meaghan
11 months ago
Not sure about this, seems like a lot of steps to consider.
ED
Edison
11 months ago
Wait, isn't identifying assets the first step?
GL
Glenn
12 months ago
Totally agree, identifying threats is crucial!
JU
Julieta
12 months ago
I think assessing vulnerabilities is key.
LA
Lajuana
12 months ago
Gotta start by identifying assets first!
RO
Romana
1 year ago
Evaluating controls seems too advanced for the first step. I think we need to start with identifying assets or threats, but I’m not entirely confident.
LA
Latosha
1 year ago
I feel like assessing vulnerabilities might come after identifying assets. But I can't recall if it should be the first step.
SH
Sherita
1 year ago
I'm not so sure about that. I remember a practice question where we had to identify potential threats first. Maybe that's the right approach?
LE
Lea
1 year ago
I think the first step should be identifying assets to be protected. Without knowing what we have, how can we assess risks?
RO
Rolland
1 year ago
The Gantt chart option sounds like a good guess, but I'm not confident that's the minimum requirement. I'll have to think this through carefully.
SH
Sheldon
1 year ago
This seems like a straightforward question about project management roles and responsibilities. I'll carefully review the options and think through what I know about the team structure.
TI
Tish
1 year ago
Okay, I think I see the pattern here. I'll try to use the modulo operator to get the remainder directly. Shouldn't be too tricky.