CRISC: Certified in Risk and Information Systems ControlDemo

Question

A risk practitioner is creating a set of bottom-up IT risk scenarios. When is it MOST important to engage business stakeholders?

A identifying risk mitigation controls
B documenting the risk scenarios
C validating the risk scenarios
D updating the risk register

Explanation

Business stakeholders validate whether IT risk scenarios accurately represent the business context, affected processes, potential impacts, and organizational priorities. Their input ensures the scenarios are relevant and credible before they are used for risk analysis and treatment decisions.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ93

Community Discussion