From the course: ISACA Certified in Risk and Information Systems Control (CRISC) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Risk action plans

Risk action plans

From the course: ISACA Certified in Risk and Information Systems Control (CRISC) Cert Prep

Start my 1-month free trial Buy for my team

Risk action plans

“

- [Instructor] So once we identify, assess, and analyze the risk, we'll need to figure out which of the response options we want to take. So as we talked about, there is a lot of different internal and external factors we'll want to take a look at, as well as the risk analysis that we did. So, why is the risk going to be as frequent as we think it is and have the impact that we think it is? After we take a look at those, we'll take a look at our risk response options. I think as we look through those response options, pretty much anything should be on the table, right? The most expensive, the least expensive, risk acceptance, only risk mitigation. Taking a look at our insurance contracts, right? The options there are going to be endless. And then we want to prioritize those risk response options. Now, as we talked about on our decision slide, there's going to be a lot of different things that we want to weigh in…

Contents