CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following BEST achieves a balance between the costs and benefits of managing IT risk?

A Eliminating risk through preventive and detective controls
B Prioritizing and addressing risk in line with risk appetite
C Considering risk that can be shared with a third party
D Evaluating the probability and impact of risk scenarios

Explanation

Risk management should prioritize and treat risks so that residual exposure remains within the organization’s risk appetite. This allocates controls and resources where they are justified, instead of attempting to eliminate all risk regardless of cost. ISACA defines risk appetite as the amount of risk an entity is willing to accept in pursuing its mission and identifies managing risk within that appetite as a core risk-management objective.

Learn more

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ73

Community Discussion