Isaca Certified in Risk and Information Systems Control CRISC Question # 463 Topic 47 Discussion
CRISC Exam Topic 47 Question 463 Discussion:
Question #: 463
Topic #: 47
Which organization is implementing a project to automate the purchasing process, including the modification of approval controls. Which of the following tasks is lie responsibility of the risk practitioner*?
A.
Verify that existing controls continue to properly mitigate defined risk
B.
Test approval process controls once the project is completed
C.
Update the existing controls for changes in approval processes from this project
D.
Perform a gap analysis of the impacted control processes
A risk practitioner is a person who is responsible for performing risk management activities, such as identifying, analyzing, evaluating, treating, monitoring, and communicating risks. When an organization is implementing a project to automate the purchasing process, including the modification of approval controls, the task that is the responsibility of the risk practitioner is to verify that the existing controls continue to properly mitigate the defined risk. This means thatthe risk practitioner should ensure that the automation and modification of the approval controls do not introduce new risks or change the existing risk profile, and that the controls are still effective and adequate for the purchasing process. The risk practitioner should also monitor the performance and compliance of the controls, and recommend any improvements or adjustments as needed. References = CRISC Review Manual, 7th Edition, page 177.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit