Câu 300: Isaca Certified in Risk and Information Systems Control

The PRIMARY objective for requiring an independent review of an organizations IT risk management process should be to:

1. A. ensure IT risk management is focused on mitigating potential risk.
2. B. confirm that IT risk assessment results are expressed as business impact.
3. C. assess gaps in IT risk management operations and strategic focus. — đáp án hiện tại
4. D. verify implemented controls to reduce the likelihood of threat materialization.