Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. An increase in control vulnerabilities When uncontrolled changes are made to the control environment, the greatest concern is the potential increase in control vulnerabilities. Uncontrolled changes can introduce new weaknesses, gaps, or flaws in the control structure that may be exploited by threat actors. This can lead to a higher likelihood of control failures and security breaches. While options B (an increase in inherent risk), C (a decrease in control layering effectiveness), and D (an increase in the level of residual risk) are also relevant considerations, control vulnerabilities are typically the most immediate and significant concern when changes to the control environment are not properly managed or controlled.
Answer should be D. Your inherent risk stays the same unless you start new business activities. It is the risk that exists without controls. The controls modify the inherent risk to give you residual risk. If there is a control in place, modifications to the control could impact the amount of risk that is being mitigated which would result in a change in residual risk.
Agree.