IIA Related Exams
IIA-CCSA Exam
The risk remaining after management takes action to reduce the impact and likelihood of an adverse event is called residual risk.
Which of the following is correct?
The documented or tangible control tools used by an organization such as policies and procedures are known as: