Isaca Certified in Risk and Information Systems Control CRISC Question # 405 Topic 41 Discussion
CRISC Exam Topic 41 Question 405 Discussion:
Question #: 405
Topic #: 41
Which of the following would be a risk practitioner’s BEST recommendation upon learning of an updated cybersecurity regulation that could impact the organization?
Performing a gap analysis is the best recommendation for a risk practitioner upon learning of an updated cybersecurity regulation that could impact the organization. A gap analysis can help identify the current state of compliance, the desired state of compliance, and the actions needed to achieve compliance. Conducting system testing, implementing compensating controls, and updating security policies are possible actions that may result from the gap analysis, but they arenot the best initial recommendation. References = ISACA Certified in Risk and Information Systems Control (CRISC) Certification Exam Question and Answers, question 1; CRISC Review Manual, 6th Edition, page 143.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit