ISACA Certified in Risk and Information Systems Control Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  • The Risk Management Plan is the document that: • Defines how risks will be identified, analyzed, and monitored • Outlines how risk responses and contingency plans will be implemented • Establishes roles, responsibilities, reporting formats, and risk categories • A. Project plan → A generic/old term (PMBOK now uses Project Management Plan). • B. Resource management plan → Focuses on managing human and physical resources, not risks. • C. Project management plan → The overall plan for the project. The Risk Management Plan is a component of this. 👉 In this scenario, since you’re defining procedures for risk identification, quantification, and contingency planning, you’re clearly creating the Risk Management Plan.