nerdexam
Isaca

CRISC · Question #133

Which of the following is the MOST important reason to validate that risk responses have been executed as outlined in the risk response plan''

The correct answer is C. To ensure residual risk Is at an acceptable level. Validating that risk responses have been executed is most important to ensure that the resulting residual risk is at an acceptable level for the organization. This confirms the effectiveness of the chosen response in bringing risk within tolerance.

Submitted by klara.se· Apr 18, 2026Risk Response and Reporting

Question

Which of the following is the MOST important reason to validate that risk responses have been executed as outlined in the risk response plan''

Options

  • ATo ensure completion of the risk assessment cycle
  • BTo ensure controls arc operating effectively
  • CTo ensure residual risk Is at an acceptable level
  • DTo ensure control costs do not exceed benefits

How the community answered

(50 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    90% (45)
  • D
    2% (1)

Why each option

Validating that risk responses have been executed is most important to ensure that the resulting residual risk is at an acceptable level for the organization. This confirms the effectiveness of the chosen response in bringing risk within tolerance.

ATo ensure completion of the risk assessment cycle

While validation is part of the risk management cycle, simply completing the cycle is not the most important reason; the outcome of the cycle (acceptable risk) is.

BTo ensure controls arc operating effectively

Ensuring controls are operating effectively is a component of validating risk responses, but the higher-level purpose is to ensure that the overall risk is acceptable.

CTo ensure residual risk Is at an acceptable levelCorrect

The ultimate goal of executing risk responses is to reduce the initial inherent risk to an acceptable residual risk level. Validation ensures that the implemented responses are indeed achieving this target, thereby protecting the organization's assets and objectives from unacceptable risk exposure.

DTo ensure control costs do not exceed benefits

Cost-benefit analysis is performed before implementing controls to justify the response, not as the primary reason for validating execution.

Concept tested: Risk response validation objective

Topics

#Risk response validation#Residual risk#Risk response execution#Risk management objectives

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CRISC Practice