The implementation of automated controls is taking longer than expected. The risk owner is concerned about the materialization of risk before full implementation of the automated controls. As a result, the risk owner has established interim manual controls. Which of the following actions is MOST important for the risk practitioner to perform?

A. Update the risk register to reflect the change in residual risk level.

B. Perform a cost-benefit analysis of the manual controls.

C. Ensure the same key risk indicators (KRIs) are used for both manual and automated controls.

D. Assess the risk associated with changes in the effectiveness of the manual and automated controls.








 

Suggested Answer: D



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.