Drag or tap steps into the slots.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
CRISC Risk Response and Mitigation Practice Question
Sequence the steps for implementing a new control based on risk assessment findings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Design the control, then Procure/Build the control, then Test the control, then Deploy the control, then Monitor the control.
Control implementation involves design, procurement/build, testing, deployment, and monitoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Design the control, then Procure/Build the control, then Test the control, then Deploy the control, then Monitor the control.
Why this is correct
This is the correct order because controls should first be designed to meet requirements, then procured or built, tested to verify effectiveness, deployed into production, and finally monitored to ensure ongoing performance.
- ✗
Procure/Build the control, then Design the control, then Test the control, then Deploy the control, then Monitor the control.
Why it's wrong here
This is incorrect because the control must be designed before it can be procured or built; otherwise, the procurement or build may not meet the required specifications.
- ✗
Design the control, then Test the control, then Procure/Build the control, then Deploy the control, then Monitor the control.
Why it's wrong here
This is incorrect because testing cannot occur before the control is built or procured; testing requires a physical or implemented control to evaluate.
- ✗
Design the control, then Procure/Build the control, then Deploy the control, then Test the control, then Monitor the control.
Why it's wrong here
This is incorrect because deploying the control before testing it risks introducing an ineffective or flawed control into the production environment.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 1,062 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.