CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ511

Risk Assessment

Which of the following would be MOST likely to lead to updates to an IT risk appetite statement?

  • A Changes in senior management
  • B External audit findings
  • C Feedback from focus groups
  • D Self-assessment reports
Explanation

An IT risk appetite statement is driven by senior leadership’s strategic objectives and tolerance for risk. Changes in senior management can alter those objectives or the organization’s willingness to accept IT risk, requiring the statement to be updated.

Community Discussion

No comments yet. Be the first to start the discussion!