CRISC Question 357

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  D. update the risk register. The risk practitioner should advise the risk owner to FIRST update the risk register. This is because updating the risk register ensures that the changes to the business process and associated risks are documented accurately and comprehensively. It provides a clear record of the revised risk profile and allows for informed decision-making regarding risk response strategies, resource allocation, and monitoring efforts. Once the risk register is updated, the risk owner can then consider other actions such as reviewing key risk indicators, conducting further risk analysis, or reallocating risk response resources as necessary.

• Chose C1

  Following a significant change to a business process, a risk practitioner believes the associated risk has been reduced. The risk practitioner should advise the risk owner to FIRST: A. reallocate risk response resources B. review the key risk indicators C. conduct a risk analysis D. update the risk register

• Chose C1

  Agree with C. After a change, analyze what the situation is before taking other actions.