Câu 4: ORM: Operational Risk Management

When a control is found to be ineffective, which of the following steps should be taken next?

1. A. Risks should be re-assessed to determine if there is the appropriate level of control assessment.
2. B. An action plan should be designed to close the gap. — đáp án hiện tại
3. C. The controls should be re-assessed during the next cycle to determine if they are still ineffective.
4. D. Risks should be re-assessed to determine if there can be an exception for the level of control assessment.