nerdexam
IIA

IIA-CIA-PART2 · Question #303

In the following risk control map risks have been categorized based on the level of significance and the associated level of control. Which of the following statements is true regarding Risk C?

The correct answer is C. The level of control is inadequate given the level of risk. In the risk control map, Risk C is positioned in the upper left quadrant, indicating it is critical (high risk significance) but with a low level of control. This suggests that the current controls are insufficient to mitigate the high level of risk associated with Risk C. For…

Planning the Engagement

Question

In the following risk control map risks have been categorized based on the level of significance and the associated level of control. Which of the following statements is true regarding Risk C?

Options

  • AThe level of control is appropriate given the level of risk
  • BThe level of control is excessive given the level of risk
  • CThe level of control is inadequate given the level of risk
  • DThere is not enough of information to determine whether the controls are appropriate or not

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    82% (27)
  • D
    9% (3)

Explanation

In the risk control map, Risk C is positioned in the upper left quadrant, indicating it is critical (high risk significance) but with a low level of control. This suggests that the current controls are insufficient to mitigate the high level of risk associated with Risk C. For critical risks, a higher level of control is necessary to ensure that the risk is properly managed and mitigated.

Topics

#risk control map#control adequacy#risk significance#risk assessment

Community Discussion

No community discussion yet for this question.

Full IIA-CIA-PART2 Practice