Câu 552: Isaca Certified in Risk and Information Systems Control

Which of the following is the PRIMARY reason to have the risk management process reviewed by a third party?

1. A. Obtain an objective view of process gaps and systemic errors. — đáp án hiện tại
2. B. Ensure the risk profile is defined and communicated.
3. C. Validate the threat management process.
4. D. Obtain objective assessment of the control environment.