CRISC: Certified in Risk and Information Systems ControlDemo

Question

Whether risk-analysis results should be presented in quantitative or qualitative terms should be based primarily on the:

A specific risk analysis framework being used.
B results of the risk assessment.
C requirements of management.
D organizational risk tolerance.

Explanation

Risk-analysis results should be communicated in the form that best meets management’s decision-making and reporting needs. Management may require quantified financial exposure, qualitative prioritization, or both depending on the decisions to be made.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1798

Community Discussion