CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ311

Risk Assessment

What is the PRIMARY reason for categorizing risk scenarios by business process?

  • A To determine aggregated risk levels by risk owner
  • B To identify situations that result in over-control
  • C To enable management to implement cost-effective risk mitigation
  • D To show business activity deficiencies that need to be improved
Explanation

Categorization by business process connects risks to the activities and controls that create or manage them, enabling management to choose appropriately targeted and cost-effective risk mitigation.

Community Discussion

No comments yet. Be the first to start the discussion!