Certified in Risk and Information Systems Control (CRISC) — Question 1321

A risk practitioner has reviewed new international regulations and realizes the new regulations will affect the organization. Which of the following should be the risk practitioner's NEXT course of action?

Answer options

• A. Conduct a peer response assessment.
• B. Reevaluate the risk management program.
• C. Update risk scenarios in the risk register.
• D. Ensure applications are compliant.

Correct answer: C

Explanation

The correct answer is C, as updating risk scenarios in the risk register is essential to reflect the implications of the new regulations. Options A and B are preliminary steps that may follow but are not the immediate next actions. Option D focuses on compliance rather than assessing risks, making it less relevant at this stage.