CRISC: Certified in Risk and Information Systems ControlDemo

Question

A global organization is considering acquiring a competitor. Senior management has requested a review of the target organization's overall risk profile.

Which component of this review would provide the MOST useful information?

A Risk appetite statement
B Risk management policies
C Risk register
D Enterprise risk management framework

Explanation

A risk register provides a consolidated inventory of the organization’s identified risks, typically including their likelihood, impact, owners, existing controls, and response status. This makes it the most directly useful source for assessing the target organization’s overall risk exposure.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ137

Community Discussion