CRISC: Certified in Risk and Information Systems ControlDemo

Question

When presenting risk assessment results to senior management, which of the following is MOST important to include to support risk-based decision-making?

A A list of assets exposed to the highest risk
B Potential losses compared to treatment cost
C Recent audit and self-assessment results
D Risk action plans and associated owners

Explanation

Comparing potential losses with treatment costs provides the financial trade-off needed to determine whether risk treatment is justified and to prioritize risk responses.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ562

Community Discussion