CRISC - Risk Response and Reporting - Section 3.9

Monitor risk and controls through data collection, aggregation and analysis, and manage issues, findings and exceptions.

Monitor risk and controls through continuous data collection, aggregation, and analysis to detect changes in the risk environment or control performance. Manage issues, findings, and exceptions through a structured process that tracks each item to resolution and escalates those that breach defined thresholds.

Examworthy is not affiliated with or endorsed by ISACA. Original, blueprint-aligned practice material only.