Isaca Certified in Risk and Information Systems Control CRISC Question # 94 Topic 10 Discussion
CRISC Exam Topic 10 Question 94 Discussion:
Question #: 94
Topic #: 10
When performing a risk assessment of a new service to support a core business process, which of the following should be done FIRST to ensure continuity of operations?
When performing a risk assessment of a new service to support a core business process, the first step is to identify the conditions that may cause disruptions to the service or the process. This involves identifying the sources and causes of potential risk events, such as natural disasters, cyberattacks, human errors, equipment failures, power outages, etc. that may affect the availability, integrity, or confidentiality of the service or the process. By identifying the conditions that may cause disruptions, the risk practitioner can then analyze the probability and impact of the risk events, evaluate the risk exposure, and determine theappropriate risk responses to ensure the continuity of operations. References = CRISC Review Manual, 7th Edition, page 66.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit