IsacaIsaca
CRISC · Question #221
CRISC Question #221: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #221. The question stem and answer options stay visible for context.
Submitted by noor.lb· Apr 18, 2026IT Risk Assessment
Question
An organization retains footage from its data center security camera for 30 days when the policy requires 90-day retention The business owner challenges whether the situation is worth remediating Which of the following is the risk manager s BEST response?
Options
- AIdentify the regulatory bodies that may highlight this gap
- BHighlight news articles about data breaches
- CEvaluate the risk as a measure of probable loss
- DVerify if competitors comply with a similar policy
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk Evaluation#Risk Assessment#Policy Non-compliance#Data Retention