CRISC: Certified in Risk and Information Systems ControlDemo

Question

The PRIMARY purpose of gathering information and reviewing documentation while conducting periodic risk analyses should be to:

A survey and analyze historical risk data
B identify new or emerging risk issues
C understand internal and external threat agents
D satisfy audit requirements

Explanation

Periodic risk analysis is intended to identify changes in the environment that create new or emerging risk issues, enabling the organization to assess and address them. Historical risk data and information about threat agents can support that work, but they are not the primary objective.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1856

Community Discussion