CRISC Certified in Risk and Information Systems Control – Question019

You are the project manager of GHT project. You have planned the risk response process and now you are about to implement various controls. What you should do before relying on any of the controls?

A. Review performance data
B. Discover risk exposure
C. Conduct pilot testing
D. Articulate risk

Correct Answer: AC

Explanation:

Explanation:
Pilot testing and reviewing of performance data to verify operation against design are done before relying on control.
Incorrect Answers:
B: Discovering risk exposure helps in identifying the severity of risk, but it does not play any role in specifying the reliability of control.
D: Articulating risk is the first phase in the risk response process to ensure that information on the true state of exposures and opportunities are made available in a timely manner and to the right people for appropriate response. But it does not play any role in identifying whether any specific control is reliable or not.