The answer here is A
The remaining or residual risk should be documented and subjected to monitoring, review and where appropriate, further treatment.
After implementation of a risk treatment plan, there are always residual risks
The value of risk reduction following risk treatment should be evaluated, calculated and documented
Should be within risk acceptance criteria
org must also have residual risk surveillance methods.
See day 2 page 125
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Acrisius
2 months ago