Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
BCDE. The residual risks are explicitly listed as part of the outputs of Risk Response Planning because once you design responses, you must identify, record, and document residual risks in the risk register.
Actually, the Risk Register Updates include residual risks, so CDE is correct
Shouldn't residual residual risk be considered as an answer too?