CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ29

VerifiedGovernance

You are the project manager for the HJT project. You want to assess the operational effectiveness of risk management capabilities. Which of the following is the BEST option for measuring that operational effectiveness?

Explanation

Capability maturity models evaluate the maturity and capability of risk-management processes, providing a structured measure of how effectively those capabilities are established, managed, and improved. Key risk indicators monitor risk conditions, key performance indicators measure performance results, and metric thresholds define limits for action.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!