CRISC Question 291

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  To see what the exact process need a control and what the process to update the control or remove it with alternative control

• Chose B1

  B. Reviewing system functionalities associated with business processes. This method involves closely examining how system functionalities align with and support the business processes they are intended to facilitate. By reviewing these functionalities in the context of the business processes, it becomes easier to identify controls that may no longer be necessary or relevant. This could be due to changes in business processes, technological advancements, or the elimination of the risks that the controls were initially designed to mitigate. This approach ensures that controls are continuously aligned with current business needs and are not just in place because of past requirements. It's a proactive way to streamline processes and improve efficiency without compromising on risk management.

• 1

  this method helps identify potentially redundant controls, it does not directly evaluate the impact of removing them, which is the most definitive way to confirm whether a control is truly unnecessary. Answer is D