mediumMultiple ChoiceObjective-mapped
CRISC Practice Question: During a risk assessment for a cloud migration…
During a risk assessment for a cloud migration project, the risk team identifies that the new SaaS application has not been tested for interoperability with existing identity management systems. The project manager argues that the integration will be straightforward and asks to remove this from the risk register. Which of the following is the BEST response from the risk practitioner?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Keep the risk in the register with a note that further assessment is needed.
The risk should be retained in the register with a note that further assessment is needed until interoperability testing can be conducted. Removing it prematurely (A) ignores potential issues. Accepting the risk (C) is premature without full evaluation. Escalating (D) may be necessary later but is not the best immediate response.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Remove the risk as it is low priority.
Why it's wrong here
Removing without assessment is premature.
- ✓
Keep the risk in the register with a note that further assessment is needed.
Why this is correct
Properly documents the risk until assessment clarifies.
- ✗
Accept the risk but document the decision.
Why it's wrong here
Acceptance requires understanding of the risk; not yet determined.
- ✗
Escalate to the project steering committee.
Why it's wrong here
Escalation may be needed later, but initial response should be to keep and assess.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.