MENU
When documenting a risk response, which of the following provides the STRONGEST evidence to support the decision?
Suggested Answer: C
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
FR
Freeman
11 months ago
Totally with you, Simona! C all the way!
TR
Truman
12 months ago
A memo? Really? That doesn't seem very solid.
JA
Jannette
12 months ago
B is important too, but not as strong as C.
QU
Quentin
12 months ago
I think A is just as valid. Committee consensus matters!
SI
Simona
1 year ago
C is definitely the strongest evidence. IT audits are thorough!
ED
Edison
1 year ago
I feel like the list of compensating controls is important, but I wonder if it really shows acceptance of the risk itself.
LO
Lourdes
1 year ago
I’m a bit confused about the verbal majority acceptance. It seems too informal compared to the other options.
HE
Hermila
1 year ago
I remember practicing a question like this, and I think a memo indicating risk acceptance could be strong too, but it feels less formal than an audit response.
RO
Roxane
1 year ago
I think the strongest evidence might be the IT audit follow-up responses, but I'm not entirely sure. It seems like they would provide solid documentation.
AD
Adolph
1 year ago
Interesting, I hadn't considered the aspect of testing deployment capacity. That could be a valid reason as well, but I'm still leaning towards the business responsiveness angle.
RO
Rodolfo
1 year ago
This seems straightforward - I think the Dissolve tool is the way to go here to combine the polygons based on the Suitability_Class attribute.
VE
Veronika
1 year ago
Hmm, this is a tricky one. I'm not entirely sure what the correct answer is, but I think it has to do with how those non-encapsulated steps are incorporated into the final solution. I'll need to review my notes on service modeling to make sure I understand the different approaches.
AL
Albert
1 year ago
I remember a similar question where we had to identify the initial actions, and it seemed like sharing reports - possibly option B - is really important at the start.