Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
• A. Promote and support consistent performance in risk management ✅ • Yes. Risk management should be integrated and consistent across the enterprise, ensuring everyone follows the same practices and standards. • B. Promote fair and open communication ✅ • Yes. Transparent communication of risks, issues, and mitigation plans is critical for timely decision-making and awareness. • C. Focus on enterprise’s objective ✅ • Yes. Risk management should align with the organization’s goals, ensuring that risks are identified and mitigated in the context of strategic objectives. • D. Balance the costs and benefits of managing risk ❌ (Tricky) • While cost-benefit considerations are important in deciding on risk responses, this is part of risk treatment/mitigation decisions, not a guideline for the overarching risk management process itself.
While this is a good practice, it is not typically listed as a core guideline in formal risk management frameworks like those from ISACA or ISO. It’s more of a principle applied during decision-making rather than a foundational guideline.