CRISC Question 12

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  The "Better" answer is D. According to ISACA, the Utility of a risk is: The value or benefit derived from the risk’s occurrence. You can make the argument that B is also correct, but is it -MORE- correct that D? I say no.

• Chose D1

  ✅ D. The usefulness of the risk to individuals or groups ⸻ Explanation In risk management: • Utility refers to the usefulness, value, or benefit derived from a risk by individuals or groups. • It’s often used in decision theory and economics (e.g., “expected utility”) to evaluate whether taking a risk has value compared to avoiding it. Other options: • A. Finance incentive behind the risk → Too narrow; doesn’t fully define utility. • B. Potential opportunity of the risk → Partially correct, but utility is broader than just opportunity. • C. Mechanics of how a risk works → That’s more about risk cause/effect analysis, not utility. ⸻ 👉 Best Answer: D. The usefulness of the risk to individuals or groups

• Chose D1

  Since utility is about the perceived benefit or usefulness of a risk, the best answer is: D. The usefulness of the risk to individuals or groups