CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1134

Risk Assessment

Which of the following is the FIRST step in identifying risk items associated with a new IT project?

  • A Review the IT control environment.
  • B Conduct a cost-benefit analysis.
  • C Review the business case.
  • D Conduct a gap analysis.
Explanation

Reviewing the business case establishes the project’s objectives, scope, assumptions, anticipated benefits, and constraints, which provides the basis for identifying its risk items.

Community Discussion

No comments yet. Be the first to start the discussion!