Isaca Certified in Risk and Information Systems Control CRISC Question # 118 Topic 12 Discussion
CRISC Exam Topic 12 Question 118 Discussion:
Question #: 118
Topic #: 12
A recent regulatory requirement has the potential to affect an organization’s use of a third party to supply outsourced business services. Which of the following is the BEST course of action?
When a new regulation affects outsourcing arrangements, thefirst and best responseis to perform agap analysis.
“Upon regulatory change, the risk practitioner should perform a gap analysis to determine areas of noncompliance and required updates in contracts or controls.”
Transferring or terminating agreements may follow depending on results.
Hence,Ais correct.
CRISC Reference:Domain 3 – Risk Response and Mitigation, Topic: Third-Party Risk and Compliance Management.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit