Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Exploitation is achieved via enhancing the condition for the event to occur.
From: CRISC Certified in Risk and Information Systems Control All-in-One Exam Guide, Second Edition Enhance may be a response to a positive risk such as a project coming in under budget. If a few dollars spent earlier in the project will save some money long term, it may make sense to enhance the risk. In another example, a security engineering team determines that a new detective control helps to reduce other risks not considered initially. I agree with Naanz. We are at the enhancement stage, it is now a question as to wether or not we exploit
Not too sure if picking answers strictly based on the manual is even the best option at this point but here are some of the risk response tactics that can be applied, and based on the article "Enhance" seems to make the most sense: https://simplicable.com/new/risk-response