Exam CRISC topic 1 question 19 discussion

Q19 did not ask you to select 2 answers

Answer is C. The question state "you have planned the risk response process and now you are about to implement various controls." Since you have not actually implemented the control, you do not have any data to evaluate the performance. The only other logical answer is to pilot test the control before implementation in production. Answer is C.

Before relying on any controls, it is important to conduct pilot testing to ensure that the controls are effective and can be implemented as planned. Pilot testing allows the project team to test the controls in a controlled environment, and to make any necessary adjustments before fully implementing them. This can help to prevent errors, delays, and additional costs that could be incurred if the controls were found to be ineffective or not feasible after implementation. A. Reviewing performance data refers to evaluating how well the controls are working, discovering risk exposure refers to identifying and analyzing new risks, and articulating risk refers to clearly and effectively communicating risks to stakeholders.

C. Conduct pilot testing Pilot testing involves implementing the controls on a smaller scale or in a controlled environment to assess their effectiveness and identify any potential issues or unforeseen consequences. It allows you to test whether the selected controls can effectively mitigate the identified risks before fully implementing them across the entire project. Conducting pilot testing helps ensure that the controls are practical and that they will work as intended in the actual project environment. This step is crucial for risk management as it helps verify that the chosen controls are appropriate and do not introduce new risks or problems.

I would also go with C

Pilot testing is important, reviewing performance data may not be able to tell whether the control is reliable or not

C is the correct answer

I will go with C, pilot testing is very important before you can rely on any controls, performance data review may not be able to provide that reliance

so what is the final answer ,