When reviewing management's IT control self-assessments, a risk practitioner noted an ineffective control that links to several low residual risk scenarios. What should be the NEXT course of action?
A.
Propose mitigating controls
B.
Assess management's risk tolerance
C.
Recommend management accept the low risk scenarios
D.
Re-evaluate the risk scenarios associated with the control
Answer should be D. The control is ineffective and linked to multiple low risks so there is potential of ineffective control to increase the risk when aggregated. So reevaluation of risk seems like a best fit here.
The question does not emphasize if the level of residual risk (even it is a low residual risk) is acceptable for the organization or not. If it is unacceptable, we would go with option "A". However, to know if the mentioned risks are acceptable or not (in order to take the decision); you have to reassess. Most times, in such questions, you have to evaluate then decide.
When a risk practitioner identifies an ineffective control that is linked to several low residual risk scenarios, it is important to re-evaluate the risk scenarios to ensure their accuracy and validity.
The emphasis is on "ineffective control that links to several low residual risk scenarios." Meaning the controls may not be providing the true picture of the risks, being false positive. I will go for "D"
Why this answer is A where the risks are low?
If the risks are low under the acceptable level then management just need to accept this risk or they might need to re-evaluate the scenarios so the answer would be either C of D.
Thoughts???
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
khushiag
Highly Voted 2 years, 10 months agomraiyan
Most Recent 1 month, 1 week agopastor1
1 month, 1 week agoCbtL
2 months, 1 week agojohn_boogieman
4 months, 3 weeks agoSuchib
6 months, 2 weeks agojohnwalters
9 months, 4 weeks agoOdenkyem
2 years, 2 months agoRooks
2 years, 10 months ago