ISACA Certified in Risk and Information Systems Control Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Because the project is closed, this has to be in the Lesson Learned DB

• Chose C1

  include the finding into lesson and learned database for future reference

• Chose C2

  Lessons learned in one department or with regards to one system or application may be applicable in protecting other departments, systems, or applications from the same problems, so collaboration and sharing of information is an important part of using risk scenarios.