CRISC Practitioner Practice Questions

A recent risk workshop has identified risk owners and responses for newly identified risk scenarios. Which of the following should be the risk practitioner's NEXT step?

• AA. Develop a mechanism for monitoring residual risk.
• BB. Update the risk register with the results.
• CC. Prepare a business case for the response options.
• DD. Identify resources for implementing responses.

A risk practitioner notices a risk scenario associated with data loss at the organization's cloud provider is assigned to the provider Who should the risk scenario be reassigned to?

• AA. Senior management
• BB. Chief risk officer (CRO)
• CC. Vendor manager
• DD. Data owner