CRISC Cert Prep: 3 Risk Response and Reporting

Learn about risk response and mitigation, one of the four IT risk management domains, and continue your preparations for the CRISC certification exam.

Introduction

• Risk response and reporting

1. Consult with Risk Owners

• Determine risk responses
• Align with business objectives
• Establish accountability

2. Risk Action Plans

• What is a risk action plan?
• Determine response
• Determine cost
• Determine target date
• Third-party risk management

3. Support Control Owners

• Control frameworks
• Control design
• Control testing
• Control implementation
• Efficient and effective execution

4. Risk Register Updates

• Identify risk profile changes
• Determine management response
• Validate execution
• Risk and control monitoring and reporting
• Key risk indicators
• Key performance indicators
• Key control indicators

Conclusion

• Next steps