Isaca Certified in Risk and Information Systems Control CRISC Question # 455 Topic 46 Discussion
CRISC Exam Topic 46 Question 455 Discussion:
Question #: 455
Topic #: 46
A new software package that could help mitigate risk in an organization has become available. Which of the following is the risk practitioner’s BEST course of action?
When evaluating new technology or tools for risk mitigation, the practitioner must ensure that the benefits justify the cost.
CRISC states:
“Risk practitioners should perform a cost-benefit analysis to determine the feasibility and value of implementing new controls or technologies.”
Governance or best practices are general references.
Thecost-benefit analysisdirectly supports decision-making and accountability.
Hence,Dis correct.
CRISC Reference:Domain 3 – Risk Response and Mitigation, Topic: Control Selection and Cost-Effectiveness.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit