Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
An open risk must be documented, and management's buy-in should be obtained on this matter. Option A looks like procasitanating
I believe its B, risk that is not mitigated event if business owner agreed to accept it need to be addressed to senior management
I think A Cannot be correct. A basically says that the remediation is not cost effective and therefore it should be accepted. However, a risk should only be accepted, if the risk is below the acceptable risk level. Hence, the security manager may recommend a more cost effective way to mitigate the risk - therefore answer D should be correct.