Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
mitigating controls are meant to reduce the chances of a threat happening while Compensating controls are put into place when specific requirements for compliance can't be met with existing controls.
mitigating controls are meant to reduce the chances of a threat happening while Compensating controls are put into place when specific requirements for compliance can't be met with existing controls.
see question # 487
C. compensating controls are in place Compensating controls refer to measures put in place to provide an equivalent level of control when primary controls are deemed ineffective or can't be implemented. If these compensating controls are present, the overall control environment may still be considered effective despite the shortcomings of certain controls. While accepting residual risk, having a control mitigation plan, or having effective risk management might be part of a larger risk management strategy, none of them inherently ensure an effective control environment when existing controls are found to be inadequate. Instead, they represent different aspects or steps within the risk management process.