CRISC Certified in Risk and Information Systems Control – Question520

During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?

A.
Escalate the issue to senior management
B. Discuss risk mitigation options with the risk owner
C. Certify the control after documenting the concern
D. Implement compensating controls to reduce residual risk

Correct Answer: D