Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
from a CRISC perspective, it falls under risk transfer because the agreement involves shifting responsibility for recovery to another organization. This arrangement ensures that if one organization faces a disaster, the other can help by providing its computing resources, but the responsibility for recovery is transferred to the other party in the agreement
I think it is not clear to others the meaning of reciprocal, just because your services was transferred to a reciprocal partner in the event of disaster it doesn't mean that you also transferred your accountability. Though your services was transferred to a reciprocal partner to maintain the availability of your business the accountability is still yours. You made a reciprocal agreement to make sure of your availability in case you fail to do so, so this is mitigation.
The answer is A. According ISACA Crisc book 6th edition: Risk transfer is a decision to reduce loss by having another organization incur the cost. The most common example of risk transfer is the purchasing of insurance, which provides a guarantee of compensation or replacement should a loss occur. Partnerships are another form of risk transfer, in which two or more organizations work together under an arrangement in which both risk of loss and potential for profit are divided among the participants according to agreed-upon terms and conditions.