IsacaIsaca
CGEIT · Question #4
CGEIT Question #4: Real Exam Question with Answer & Explanation
Sign in or unlock CGEIT to reveal the answer and full explanation for question #4. The question stem and answer options stay visible for context.
Submitted by khalil_dz· Apr 18, 2026Risk Optimization
Question
An enterprise learns that a new privacy regulation was recently published to protect customers in the event of a breach involving personally identifiable information (Pll). The IT risk management team's FIRST course of action should be to:
Options
- Aevaluate the risk appetite for the new regulation.
- Bdefine the risk tolerance for the new regulation.
- Cdetermine if the new regulation introduces new risk.
- Dassign a risk owner for the new regulation.
Unlock CGEIT to see the answer
You've previewed enough free CGEIT questions. Unlock CGEIT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk Management Process#Regulatory Compliance#Risk Identification#IT Risk