CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is the GREATEST concern when a generic set of IT risk scenarios is used for risk analysis?

A Inherent risk might not be considered
B Implementation costs might increase
C Risk factors might not be relevant to the organization
D Quantitative analysis might not be possible

Explanation

Risk scenarios must be tailored to the organization’s particular business context, assets, threat landscape, and control environment. Generic scenarios can include risk factors that are not relevant to that organization, producing an unreliable risk analysis.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ381

Community Discussion