Isaca CRISC Question Answer
A compensating control is MOST appropriate when:
Management wants to increase the number of controls.
A vulnerability is identified.
Existing controls are inadequate.
A key control is already in place and operating effectively.
A compensating control addresses risk when the primary control cannot meet the required objectives due to practical constraints.
TESTED 11 Jul 2025
Copyright © 2014-2025 ACE4Sure. All Rights Reserved