Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Evaluate alternative controls If preventive controls can't be implemented due to technological limitations, the first step should be to evaluate alternative controls. These could include detective or corrective controls. You want to identify another way to reduce the risk, and then potentially consider redefining business processes, upgrading technology, or defining a new monitoring process. But the first step should be to see if there's another way to control the risk.