CRISC Question 181

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  D is the answer. Prabh dealt with a similar question.

• Chose D2

  Agree with D. It is all about the culture.

• Chose D4

  To know and understand it you have to study more and reason it, not just ask why and expect another to solve. This is the collaborative idea. The culture of an organization can have a significant impact on the effectiveness of its risk management efforts. A risk-aware culture that prioritizes risk management and encourages open communication can help to ensure that risks are properly identified, assessed, and addressed. In contrast, a culture that downplays the importance of risk management or is resistant to change may impede risk management efforts and increase the organization's exposure to risk. While the expertise of the risk manager is important, it is only one component of effective risk management. A skilled risk manager can help to identify and assess risks, develop risk mitigation strategies, and monitor risk management activities. However, without a supportive culture, even the most skilled risk manager may struggle to effectively manage risk. A culture that values risk management and encourages collaboration can help to ensure that the organization's risk management efforts are successful over the long term.