IsacaIsaca
CRISC · Question #404
CRISC Question #404: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #404. The question stem and answer options stay visible for context.
Submitted by ricky.ec· Apr 18, 2026IT Risk Assessment
Question
Which of the following actions should a risk practitioner do NEXT when an increased industry trend of external cyber attacks is identified?
Options
- AConduct a threat and vulnerability analysis.
- BNotify senior management of the new risk scenario.
- CUpdate the risk impact rating in the risk register.
- DUpdate the key risk indicator (KRI) in the risk register.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk assessment#Threat analysis#Vulnerability analysis#Cyber security risk