Isaca Certified in Risk and Information Systems Control CRISC Question # 454 Topic 46 Discussion
CRISC Exam Topic 46 Question 454 Discussion:
Question #: 454
Topic #: 46
A risk practitioner has been made aware of a problem in an IT system that was missed during a routine risk assessment. Which of the following is the practitioner ' s BEST course of action?
A.
Record the problem as a new issue in the risk management system
B.
Record a new issue but backdate it to the original risk assessment date
C.
Report the vulnerability to the asset owner ' s manager
D.
Document the issue during the next risk assessment
Thebest practiceis torecord the problem immediately as a new issuein the risk management system. ISACA emphasizes maintaining an up-to-date risk register to ensure emerging issues are tracked and addressed in a timely manner.
===========
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit