CRISC: Certified in Risk and Information Systems ControlDemo

Question

When developing risk scenarios from a list of generic scenarios grounded in industry best practices, it is MOST important to:

A assess generic risk scenarios with business users.
B validate the generic risk scenarios for relevance.
C select the maximum possible risk scenarios from the list.
D identify common threats causing generic ask scenarios.

Explanation

Generic risk scenarios are a starting point for defining an enterprise’s concrete, customized scenarios. They must be evaluated for relevance to the organization’s real business risks before being used in the risk register or analysis.

Learn more

IT Scenario Analysis in Enterprise Risk Management

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1359

Community Discussion