Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Monitor the effectiveness of controls.
If the residual risk of a business activity is lower than the acceptable risk level, it means that the measures taken to reduce the risk are effective. The best course of action would be to monitor the risk, review the risk management strategy, communicate the results, and continuously improve the risk management strategy. This will help ensure that the risk remains at an acceptable level and the organization is prepared to manage any future risks that may arise.
Monitoring the effectiveness of controls ensures that the implemented controls are working as intended and that the residual risk is still within the acceptable level. This process helps to identify if the controls need to be adjusted, replaced or removed. It is important to have a regular monitoring process in place to detect any changes in the threat environment or business operations that could impact the effectiveness of the controls.