Which of the following is MOST important to include in regulatory and risk updates when a new legal requirement affects the organization?

A. Recommended key risk indicator (KRI) thresholds.

B. Cost of changes to critical business processes.

C. Risk associated with noncompliance.

D. Time frame to remediate noncompliance risk.








 

Suggested Answer: C



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.