Certified Information Systems Auditor CISA · Free Practice Question Medium
Question 67
When is the use of compensating controls necessary?
- A a) When one control is absent and cannot be replaced
- B b) When there is a need for multiple controls in the same area
- C c) When the organization prefers to have alternate security measures
- D d) When preventive controls fail to deter threat events
Reveal correct answer
Correct answer: A
Explanation
Correct answer: a) When one control is absent and cannot be replaced Explanation: The use of compensating controls becomes necessary when one control is absent and cannot be replaced with an equivalent control. In such cases, compensatory measures are implemented to mitigate the risk associated with the absence of primary control.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
