CISA Question 87

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Answer: A

• Chose D1

  Overall

• Chose A2

  Residual risk refers to the level of risk that remains after risk treatment measures (such as implementing controls or mitigation strategies) have been applied. A highly effective risk management program aims to minimize residual risk to an acceptable level, considering the organization's risk appetite and tolerance.

• 1

  Control risk is minimized.