CCAK Question 1

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Has anyone passed this test using the content posted here?

• Chose C1

  C. Risk appetite The risk appetite of an organization defines the level and type of risk it is willing to accept in pursuit of its objectives. Changes to an organization's risk appetite will most likely influence the expansion or reduction of controls required to remediate risk, including those arising from changes to a SaaS vendor. If the risk appetite increases, the organization may opt for fewer controls, accepting higher risk. Conversely, if the risk appetite decreases, more stringent controls may be implemented to mitigate risks more thoroughly.

• 1

  C is the correct answer. If the change/s introduces additional risk, - the risk appetite and tolerance can determine if the organization is willing to take or tolerate the introduced risk.