Free ISO-27005-RM Web TestEngine Demo

Q13 Single choice

An accepted cloud risk was last reviewed six months ago. The provider has now changed its platform architecture, and a new law applies, although the annual control test passed. What should happen?

A
Wait for the annual review because successful control testing covers all changing risk factors.
B
Trigger a review of assumptions, criteria, risk, controls, and treatment, then adjust as needed.
C
Preserve the acceptance decision because accepted risks do not require event-driven review.
D
Review only the provider's control because business and legal changes are outside risk monitoring.

ISO-27005-RM Web TestEngine demo