Exam IIA-CRMA Topic 1 Question 176 Discussion

Actual exam question for IIA's IIA-CRMA exam
Question #: 176
Topic #: 1
What is the purpose of a secondary control?

Suggested Answer: D Vote an answer

by BLOOD1442 at Dec 21, 2025, 03:21 PM

Limited Time Offer

15%

Off

Get Premium IIA-CRMA Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
BLOOD1442
2025-12-21 15:21:27
Selected Answer: C
A secondary control is essentially a "backup" or a "safety net." It is not the first line of defense, but it provides additional protection.

Risk Mitigation: A secondary control is designed to mitigate a risk that is already partially addressed by a primary control.

The "Gap" Filler: If a key control (the most effective one) fails or is circumvented, the secondary control is there to catch some of the fallout. It won't necessarily eliminate the risk entirely, but it reduces the residual risk to a lower level than if no backup existed.

D. Combines with other controls: This is the definition of Complementary Controls. These are controls that work together simultaneously to achieve a single control objective. They are "peers," whereas a secondary control is a "subordinate."
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10