Isaca Certified in Risk and Information Systems Control CRISC Question # 19 Topic 2 Discussion
CRISC Exam Topic 2 Question 19 Discussion:
Question #: 19
Topic #: 2
A service organization is preparing to adopt an IT control framework to comply with the contractual requirements of a new client. Which of the following would be MOST helpful to the risk practitioner?
Completing a gap analysis identifies discrepancies between current controls and the requirements of the IT control framework, ensuring a focused approach to compliance. This supportsRisk Assessment for Compliance Requirements.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit