CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which action should a risk practitioner take FIRST to support implementing governance for organizational assets within an enterprise risk management (ERM) program?

A Conduct risk assessments across the business.
B Hire experienced and knowledgeable resources.
C Develop a detailed risk profile.
D Schedule internal audits across the business.

Explanation

Enterprise-wide risk assessments identify and quantify risks to organizational assets, enabling governance decisions to prioritize assets, assign appropriate controls, and allocate resources according to risk. A risk profile is an output informed by those assessments, while internal audits assess existing arrangements.

Learn more

Performing a Security Risk Assessment

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1113

Community Discussion