CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which factor below is MOST important to consider when determining an asset's value during the risk-identification process?

A The vulnerability profile of the asset
B The size of the asset's user base
C The criticality of the asset
D The monetary value of the asset

Explanation

Asset value should be assessed primarily by its criticality to business operations and objectives, including the impact if it is compromised, lost, altered, or unavailable. Monetary value and user-base size can contribute to the assessment, but neither necessarily reflects the asset’s operational importance.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1560

Community Discussion