The same access-control fails for a fourth quarter in a row at a public hospital, and remediation keeps slipping. What supporting handoff should compliance make?
Select an answer to reveal the explanation.
Short Explanation
Same fail, fourth quarter — that is not a one-off bug; it is a risk conversation. Hand it to risk so leadership decides appetite instead of living in endless remediation limbo.
Full Explanation
Systemic or recurring control failures that stall remediation should escalate from compliance into the risk process for appetite and treatment decisions. Hiding failures, falsely marking controls effective, or shifting ownership without risk discussion leaves residual exposure unmanaged.