Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Identify changes in risk factors and initiate risk reviews. The best course of action for the newly hired risk practitioner is to "C. Identify changes in risk factors and initiate risk reviews." If the risk register has not been updated for a year, there is a significant risk that the register might not accurately reflect the current risk landscape. The risk practitioner should start by identifying any changes in risk factors, business environment, or operations that may have occurred over the past year. After identifying these changes, the practitioner should initiate risk reviews to assess the current risk profile and update the risk register accordingly. While the other options might have their merits in specific contexts, the immediate priority should be to ensure that the risk register is accurate and up to date. This can be achieved by systematically reviewing and updating the register based on changes in risk factors and the organization's context.
Agree with C.