Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Residual risk represents the level of risk that remains after controls have been implemented to mitigate inherent risks. Communicating residual risk is critical because it provides stakeholders with a clear understanding of the current risk exposure and whether it aligns with the organization's risk appetite. This information is essential for decision-making and prioritizing further risk mitigation efforts.
According to ISACA, the MOST critical type of risk to communicate to key stakeholders following an IS audit would be: A. Control risk. Control risk refers to the risk that the organization's internal controls will fail to prevent or detect material misstatements or issues, which could impact the organization's ability to achieve its objectives. Communicating control risks to stakeholders is crucial because these risks indicate potential weaknesses in the control environment that could lead to significant operational or financial consequences. Addressing control risks helps ensure that corrective actions are taken to mitigate them effectively.
A is correct. It represents an unexpected situation