ExamQuestions.com

Register
Login
Certified in Risk and Information Systems Control Exam Questions

Isaca

Certified in Risk and Information Systems Control

473 / 500

Question 473:

A risk assessment has identified that an organization may not be in compliance with industry regulations. The BEST course of action would be to: 

Answer options:

A. collaborate with management to meet compliance requirements
B. conduct a gap analysis against compliance criteria
C. identify necessary controls to ensure compliance
D. modify internal assurance activities to include control validation