CRISC Certified in Risk and Information Systems Control – Question764

After recent updates to the risk register, management has requested that the overall level of residual risk be reduced. Which of the following is the risk practitioner's BEST course of action?

A.
Prioritize remediation plans.
B. Recommend the acceptance of low-level risk.
C. Develop new risk action plans with risk owners.
D. Implement additional controls.

Correct Answer: D