Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Determine if the scenarios need to be accepted or responded to. When new risk events are identified during a project, the next step should be to assess these risks to determine whether they need to be accepted (meaning no action is taken), or if a risk response plan should be developed and implemented. This assessment helps in deciding how to address these new risk events effectively. Continuing with a quantitative or qualitative risk analysis may be part of the process of assessing these new risks, but the initial step is to decide on a course of action based on their potential impact and likelihood. Recording the scenarios in the risk register is an important step but typically comes after the assessment and decision-making process.
We do not have enough information to decide if a quantitative or qualitative approach would be warranted. First action is to record the information, I believe. Selected D.
Maybe A