Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C for me
C. Modify the action plan in the risk register When a new manager of a risk mitigation action plan identifies a more effective control and begins implementing it, it's essential to update the risk register and action plan to reflect the change. This ensures that the organization's documentation accurately represents the current risk management status and control measures in plac
B. Identify an owner for the new control. The best course of action for the risk practitioner in this scenario is to "B. Identify an owner for the new control." Since the new manager has identified a more effective control option and is implementing it, it's important to ensure that there is clear ownership of the new control. This ensures accountability and responsibility for the control's implementation and ongoing management. While the other options (communicating the decision to the risk owner, modifying the action plan in the risk register, seeking approval from the previous action plan manager) may also have relevance in certain contexts, identifying an owner for the new control is the immediate and essential step to ensure that the control is properly managed and integrated into the risk mitigation efforts.