CAS-004 practice question 25 of 35

An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact. Which of the following should the organization perform NEXT?

Full set: 610 questions
Answer options
A: Assess the residual risk. Correct answer
B: Update the organization’s threat model.
C: Move to the next risk in the register.
D: Recalculate the magnitude of impact.
Correct Answer:
A. Assess the residual risk.
Explanation

:

Scroll to Top