CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ61

Risk Assessment

Which of the following is the BEST method for keeping an up-to-date list of organizational risk scenarios?

  • A Conduct periodic risk reviews with stakeholders.
  • B Perform regular reviews of key controls.
  • C Conduct compliance reviews.
  • D Automate workflow for risk status updates.
Explanation

Risk scenarios should be revisited regularly with relevant stakeholders because organizational objectives, threats, vulnerabilities, and business conditions change over time. This keeps the risk register—a list of identified, analyzed, and prioritized risk scenarios—current. Reviewing controls, conducting compliance reviews, or automating status updates addresses narrower activities and does not replace reassessing the scenarios themselves.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!