Certified in Risk and Information Systems Control (CRISC) — Question 1439

Which of the following is the BEST course of action when risk is found to be above the acceptable risk appetite?

Answer options

• A. Execute the risk response plan.
• B. Analyze the effectiveness of controls.
• C. Maintain the current controls.
• D. Review risk tolerance levels.

Correct answer: A

Explanation

The correct answer is A because executing the risk response plan is essential to mitigate risks that surpass the acceptable threshold. The other options, while important, do not directly address the immediate need to respond to heightened risk levels.