CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following activities would BEST help promote an organization-wide risk-aware culture?

A Communicating components of risk and their acceptable levels
B Performing a benchmark analysis and evaluating gaps
C Participating in peer reviews and implementing best practices
D Conducting risk assessments and implementing controls

Explanation

Communicating risk components and acceptable risk levels establishes shared understanding of risk, risk appetite, and expected decision-making across the organization, which is fundamental to a risk-aware culture.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1189

Community Discussion