CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1165

Risk Assessment

At which of the following risk management capability maturity levels are risk appetite and tolerance applied only during episodic risk assessments?

  • A Level 3
  • B Level 2
  • C Level 4
  • D Level 1
Explanation

At Level 1, risk management is still largely ad hoc and episodic. Risk appetite and tolerance are therefore applied during individual risk assessments rather than being consistently embedded in enterprise policies, standards, and ongoing decision-making.

Community Discussion

No comments yet. Be the first to start the discussion!