IsacaIsaca
CRISC · Question #83
CRISC Question #83: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #83. The question stem and answer options stay visible for context.
Submitted by carter_n· Apr 18, 2026IT Risk Assessment
Question
During a risk assessment, a key external technology supplier refuses to provide control design and effectiveness information, citing confidentiality concerns. What should the risk practitioner do NEXT?
Options
- AEscalate the non-cooperation to management
- BExclude applicable controls from the assessment.
- CReview the supplier's contractual obligations.
- DRequest risk acceptance from the business process owner.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Third-party risk#Vendor management#Risk assessment#Contractual obligations