Isaca Exam CRISC Topic 10 Question 71 Discussion

Actual exam question for Isaca's Certified in Risk and Information Systems Control exam

Question #: 71
Topic #: 10

[All Certified in Risk and Information Systems Control Questions]

Which of the following should be a risk practitioner's NEXT step after learning of an incident that has affected a competitor?

AActivate the incident response plan.

BImplement compensating controls.

CUpdate the risk register.

DDevelop risk scenarios.

Show Suggested Answer

Suggested Answer: A

by Junita at Apr 11, 2024, 10:43 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Comments

Submit Cancel

Barrett

16 hours ago

I disagree. I think we should activate the incident response plan first. We need to ensure we have a handle on the situation and take appropriate actions to mitigate any immediate risks.

upvoted 0 times

...

Tambra

2 days ago

Hmm, this is an interesting question. I think the next step would be to update the risk register. We need to document the incident and assess its potential impact on our own organization.

upvoted 0 times

...