Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CRISC All Questions

View all questions & answers for the CRISC exam

Exam CRISC topic 1 question 1784 discussion

Actual exam question from Isaca's CRISC
Question #: 1784
Topic #: 1
[All CRISC Questions]

A risk practitioner learns that a risk owner has been accepting gifts from a supplier of IT products. Some of these IT products are used to implement controls and to mitigate risk to acceptable levels. Which of the following should the risk practitioner do FIRST?

  • A. Reassess the risk and review the underlying controls.
  • B. Initiate disciplinary action against the risk owner.
  • C. Report the activity to the supervisor.
  • D. Review organizational ethics policies.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
cyberbugnx
1 month ago
D. Review organizational ethics policies. The first action the risk practitioner should take is to review the organization's ethics policies to fully understand the policies regarding gifts, conflicts of interest, and how to handle such situations
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...