Isaca Exam CRISC Topic 10 Question 71 Discussion

Actual exam question for Isaca's Certified in Risk and Information Systems Control exam

Question #: 71
Topic #: 10

[All Certified in Risk and Information Systems Control Questions]

Which of the following should be a risk practitioner's NEXT step after learning of an incident that has affected a competitor?

AActivate the incident response plan.

BImplement compensating controls.

CUpdate the risk register.

DDevelop risk scenarios.

Show Suggested Answer

Suggested Answer: A

by Junita at Apr 11, 2024, 10:43 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Comments

Submit Cancel

Velda

18 hours ago

I think developing risk scenarios is a good idea. We need to think through potential impacts and how we might respond to similar incidents in the future. That will help us strengthen our overall risk management approach.

upvoted 0 times

...

Jose

2 days ago

Hmm, I'm not sure. Implementing compensating controls could also be a good option. We might need to put some temporary measures in place to address the risks while we figure out the next steps.

upvoted 0 times

...

France

3 days ago

I'm with Barrett on this one. It's crucial to act quickly and get our incident response plan in motion. We can't afford to sit back and just update the risk register.

upvoted 0 times

...

Barrett

5 days ago

I disagree. I think we should activate the incident response plan first. We need to ensure we have a handle on the situation and take appropriate actions to mitigate any immediate risks.

upvoted 0 times

...

Tambra

6 days ago

Hmm, this is an interesting question. I think the next step would be to update the risk register. We need to document the incident and assess its potential impact on our own organization.

upvoted 0 times

...