IsacaIsaca
CRISC · Question #500
CRISC Question #500: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #500. The question stem and answer options stay visible for context.
Submitted by ashley.k· Apr 18, 2026Governance
Question
A risk practitioner is advising management on how to update the IT policy framework to account for the organization s cloud usage. Which of the following should be the FIRST step in this process?
Options
- AConsult with industry peers regarding cloud best practices.
- BEvaluate adherence to existing IT policies and standards.
- CDetermine gaps between the current state and target framework.
- DAdopt an industry-leading cloud computing framework.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Policy framework update#Cloud governance#Gap analysis#Risk management process