Certified in Risk and Information Systems Control (CRISC) — Question 684

Following a significant change to a business process, a risk practitioner believes the associated risk has been reduced. The risk practitioner should advise the risk owner to FIRST:

Answer options

• A. reallocate risk response resources
• B. review the key risk indicators
• C. conduct a risk analysis
• D. update the risk register

Correct answer: C

Explanation

The correct answer is C, as conducting a risk analysis is essential to accurately assess the new risk level following the change. The other options might be relevant later, but without a thorough risk analysis, the risk owner may not have a clear understanding of the current risk situation.