CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ30

Risk Assessment

It is MOST important for a risk practitioner to be aware of an organization's processes in order to:

  • A perform a business impact analysis (BIA)
  • B establish risk guidelines
  • C understand control design
  • D identify potential sources of risk
Explanation

Understanding organizational processes reveals the activities, dependencies, assets, handoffs, and failure points from which risks may originate. This enables identification of potential sources of risk.

Community Discussion

No comments yet. Be the first to start the discussion!