CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ99

Risk Assessment

Which of the following is MOST important to determine from a risk assessment?

  • A Risk appetite statement
  • B Process ownership
  • C Risk response options
  • D Risk tolerance levels
Explanation

A risk assessment evaluates the likelihood and impact of risk to support selection of an appropriate response, such as accepting, avoiding, mitigating, or transferring the risk. Risk appetite and tolerance are management-defined boundaries that inform the assessment and response decision.

Community Discussion

No comments yet. Be the first to start the discussion!