CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1119

Risk Assessment

Which observation below would be of the GREATEST concern to a risk practitioner assessing an organization’s risk-management practices?

  • A Several risk scenarios have art on plans spanning mu t pie years
  • B Business leaders provide final approval for information security policies
  • C Senior management has approved numerous requests for risk acceptance
  • D Senior management does not set risk tolerance
Explanation

Senior management must establish risk tolerance so that risk owners can make consistent, business-aligned decisions about accepting, treating, transferring, or avoiding risk. Without defined tolerance, risk acceptance decisions lack an approved threshold and governance basis.

Community Discussion

No comments yet. Be the first to start the discussion!