IIA-CIA-PART2 · Question #303
In the following risk control map risks have been categorized based on the level of significance and the associated level of control. Which of the following statements is true regarding Risk C?
The correct answer is C. The level of control is inadequate given the level of risk. In the risk control map, Risk C is positioned in the upper left quadrant, indicating it is critical (high risk significance) but with a low level of control. This suggests that the current controls are insufficient to mitigate the high level of risk associated with Risk C. For…
Question
In the following risk control map risks have been categorized based on the level of significance and the associated level of control. Which of the following statements is true regarding Risk C?
Options
- AThe level of control is appropriate given the level of risk
- BThe level of control is excessive given the level of risk
- CThe level of control is inadequate given the level of risk
- DThere is not enough of information to determine whether the controls are appropriate or not
How the community answered
(33 responses)- A6% (2)
- B3% (1)
- C82% (27)
- D9% (3)
Explanation
In the risk control map, Risk C is positioned in the upper left quadrant, indicating it is critical (high risk significance) but with a low level of control. This suggests that the current controls are insufficient to mitigate the high level of risk associated with Risk C. For critical risks, a higher level of control is necessary to ensure that the risk is properly managed and mitigated.
Topics
Community Discussion
No community discussion yet for this question.