CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is MOST important for successfully developing IT risk scenarios?

A Control effectiveness assessment
B Threat and vulnerability analysis
C Internal and external audit reports
D Cost-benefit analysis

Explanation

Threat and vulnerability analysis identifies the events and weaknesses that can create risk, providing the foundation for defining realistic IT risk scenarios. Control effectiveness can refine the assessment afterward, whereas audit reports and cost-benefit analysis are supporting inputs rather than the primary basis for scenario development.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ146

Community Discussion