CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ284

Governance

The PRIMARY benefit of adopting an IT risk management framework is the:

  • A alignment of business goals with IT objectives
  • B improvement of controls within the organization and minimized losses
  • C compliance with relevant legal and regulatory requirements
  • D establishment of a reliable basis for risk-aware decision making
Explanation

A risk management framework establishes a consistent, disciplined process and common risk information for risk-aware decision-making. ISACA describes IT risk resources as supporting risk-related decision making, and ISO 31000 integrates risk-based decision-making into organizational governance and management.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!