CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ410

Risk Assessment

Which of the following offers the BEST aggregation of risk factors across an enterprise?

  • A Risk scenario analysis
  • B Risk tolerance and appetite statement
  • C Risk register
  • D Business area risk profile
Explanation

A risk register is the central repository for identified risk scenarios and their related assessment information, enabling enterprise-wide consolidation and aggregation of risk factors. A risk appetite and tolerance statement establishes acceptable risk boundaries, while risk scenario analysis evaluates individual scenarios.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!