Certified in Risk and Information Systems Control (CRISC) — Question 641

Marie has identified a risk event in her project that needs a mitigation response. Her response actually creates a new risk event that must now be analyzed and planned for. What term is given to this newly created risk event?

Answer options

• A. Residual risk
• B. Secondary risk
• C. Infinitive risk
• D. Populated risk

Correct answer: B

Explanation

The correct answer is B, Secondary risk, which refers to a new risk that arises as a direct result of implementing a risk response. Option A, Residual risk, pertains to the risk that remains after risk responses have been implemented, while C and D are not recognized terms in risk management.