CRISC Question 197

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A. Engage line management in risk assessment workshops Engaging line management in risk assessment workshops is the best approach to identify relevant risk scenarios. Line managers have a hands-on understanding of day-to-day operations, as well as the risks associated with their specific areas of responsibility. Their practical knowledge and experience make them valuable contributors to the risk identification process. The other options: B. Escalate the situation to risk leadership: While risk leadership should be involved in strategic risk management decisions, they might not have the same level of detailed, operational knowledge as line management to identify specific risk scenarios. C. Engage internal audit for risk assessment workshops: Although internal audit can provide valuable input into risk assessments, they often have a more independent, oversight role rather than a deep operational understanding that line management can provide. D. Review system and process documentation: While reviewing documentation is certainly part of identifying risks, it might not capture all the nuances of real-world operations and potential risks that engaging with line management can uncover.

• Chose A3

  Stakeholder engagement is the most important when developing risk scenarios. Line managers oversee the daily operations and they have the best knowledge/experience to develop risk scenarios. The last option "D" is good but we should assume an updated system documentation that identify all up-to-date risks

• Chose A1

  Feel that management, while line managers, would provide more risk scenarios than review of documentation.