Question 461:
A risk practitioner has determined that a key control does not meet design expectations. Which of the following should be done NEXT?
Answer options:
A. Invoke the incident response plan B. Modify the design of the control C. Document the finding in the risk register D. Re-evaluate key risk indicators