Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Read last line of the question,it’s asking you to respond
Update the risk register After monitoring risks and implementing pre-planned risk responses, the immediate step is to update the risk register. This ensures that: The status of the risk (e.g., resolved, mitigated, or escalated) is documented. Any changes to the risk’s impact, probability, or response strategy are recorded. The risk register remains an accurate and up-to-date tool for ongoing risk management. While the other options are important, they are not the immediate next step: A. Initiate incident response: This occurs during the risk response phase, not after monitoring. C. Eliminate the risk completely: This is not always possible or practical. D. Communicate lessons learned: This happens after the risk event is fully resolved and analyzed.
It says you have a risk response plan, don’t say that you have implemented it. As per isaca risk event is an incident so responding to it would be next.