IRGST Question Bank for Exam Preparation

Select Knowledge area and click the cube

Generate random question

Question:

Management is sending a team of experts for a risk audit. You inform management that you have already completed the risk review process and did not find any shortcomings, so there is no need for a risk audit. However, management is firm on their decision. Which of the following is true about the risk audit and risk review?
  • A risk audit is performed to see the effectiveness of a risk response plan
  • A risk audit is performed to see if you are following the correct procedures
  • A risk review is performed to see if you are following the correct procedures
  • Both are the same but an audit is done by external experts and a review is done internally











User Agreement| |Privacy Policy