ExamQuestions.com

Register
Login
Certified in Risk and Information Systems Control Exam Questions

Isaca

Certified in Risk and Information Systems Control

458 / 500

Question 458:

Which of the following should be done FIRST when a new risk scenario has been identified? 

Answer options:

A. Assess the risk awareness program
B. Assess the risk training program
C. Identify the risk owner
D. Estimate the residual risk