Câu 451: Isaca Certified in Risk and Information Systems Control

Which of the following would be a risk practitioner's BEST course of action when a project team has accepted a risk outside the established risk appetite?

1. A. Monitor the residual risk level of the accepted risk.
2. B. Escalate the risk decision to the project sponsor for review. — đáp án hiện tại
3. C. Document the risk decision in the project risk register.
4. D. Reject the risk acceptance and require mitigating controls.