A key risk indicator (KRI) flags an exception for exceeding a threshold but remains within risk appetite. Which of the following should be done NEXT?

A. Adjust the risk threshold level to match risk appetite.

B. Review the risk appetite level to ensure it is appropriate.

C. Review the trend to determine whether action is needed.

D. Document that the KRI is within risk appetite.








 

Suggested Answer: C



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.