CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1748

Risk Assessment

Which of the following is the BEST approach when developing a comprehensive set of IT risk scenarios?

  • A Gather scenarios from senior management
  • B Derive scenarios from IT risk policies and standards
  • C Benchmark scenarios against industry peers
  • D Map scenarios to a recognized risk management framework
Explanation

Mapping scenarios to a recognized risk management framework provides a systematic, comprehensive basis for identifying and organizing IT risk. Framework-based generic scenarios can be tailored to the enterprise and help ensure that significant risks are not overlooked.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!