CRISC › Risk Response and Mitigation

Risk Response and Mitigation Practice Questions

This domain covers selecting, implementing, and validating risk responses—mitigation, transfer, avoidance, and acceptance—and tracking residual risk against appetite. Questions test sequencing control implementation, classifying response types, and judging whether proceeding above appetite with monitoring is acceptable. Expect scenario-based items tied to risk register updates and control ownership.