CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1649

Risk Assessment

Which of the following is the BEST risk-management approach for the strategic IT planning process?

  • A The IT strategic plan is developed from the organization-wide risk management plan.
  • B Risk scenarios associated with IT strategic initiatives are identified and assessed.
  • C Key performance indicators (KPIs) are established to track IT strategic initiatives.
  • D The IT strategic plan is reviewed by the chief information security officer (CISO) and enterprise risk management (ERM).
Explanation

Risk management in strategic IT planning requires identifying and assessing risk scenarios associated with proposed IT strategic initiatives so that risk-informed decisions, priorities, and controls can be incorporated into the plan.

Community Discussion

No comments yet. Be the first to start the discussion!