Câu 364: Isaca Certified in Risk and Information Systems Control

A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the associated risk to senior management, the risk practitioner should explain:

1. A. the current level of risk is within tolerance.
2. B. mitigation plans for threat events should be prepared in the current planning period.
3. C. an increase in threat events could cause a loss sooner than anticipated. — đáp án hiện tại
4. D. this risk scenario is equivalent to more frequent, but lower impact risk scenarios.