CRISC Question 76

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  During risk response only, appropriate controls will be identified. Risk assessment reveals risk rating and prioritization onl

• Chose B1

  A. Identification of risk → that’s an input/step, not the final output. ❌ B. Identification of appropriate controls → ✅ this is an output, because after assessing risks, you propose which controls can address them. C. Mitigated risk → ❌ mitigation happens in the risk response stage, not assessment. D. Enterprise left with residual risk → ❌ that’s after treatment (risk response), not assessment.

• Chose A1

  The correct answer is A. Did yall get your answers from Ai or something?