Câu 543: Isaca Certified in Risk and Information Systems Control

What should be the PRIMARY objective for a risk practitioner performing a post-implementation review of an IT risk mitigation project?

1. A. Confirming that the project budget was not exceeded
2. B. Documenting project lessons learned
3. C. Validating that the risk mitigation project has been completed
4. D. Verifying that the risk level has been lowered — đáp án hiện tại