CRISC Question #300: Real Exam Question with Answer & Explanation

Question

Which of the following will BEST help to ensure implementation of corrective action plans?

Options

• AContracting to third parties
• BEstablishing employee awareness training
• CSetting target dates to complete actions
• DAssigning accountability to risk owners

Explanation

Assigning accountability to risk owners is the most effective way to ensure the implementation of corrective action plans.

Common mistakes.

• A. Contracting to third parties might transfer the work but not necessarily the overall accountability for ensuring the plan's completion and effectiveness.
• B. Employee awareness training is important for general security culture but does not directly ensure the implementation of specific corrective actions.
• C. Setting target dates is a good practice for project management but lacks the enforcement mechanism provided by assigning direct accountability.

Concept tested. Corrective Action Plan Implementation

Reference. https://learn.microsoft.com/en-us/compliance/regulatory/regulatory-compliance-dashboard-risk-assessment

No community discussion yet for this question.