CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1259

Risk Assessment

Which of the following statements are true of an enterprise’s risk management capability maturity level 3?

Choose three
  • A Workflow tools are used to accelerate risk issues and track decisions
  • B The business knows how IT fits in the enterprise risk universe and the risk portfolio view
  • C The enterprise formally requires continuous improvement of risk management skills, based on clearly defined personal and enterprise goals
  • D Risk management is viewed as a business issue, and both the drawbacks and benefits of risk are recognized
Explanation

At maturity level 3, risk management is integrated as a business concern, including recognition of both risk’s downsides and benefits. The business understands how IT relates to the enterprise risk universe and risk portfolio view, and workflow tools support faster handling of risk issues and decision tracking. Formal, goal-based continuous improvement requirements for risk-management skills characterize a higher maturity level.

Community Discussion

No comments yet. Be the first to start the discussion!