CRISC Question 209

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  "Most important to understand" and "approach" are they key words for me. All other answers do not make sense to me. I interpret the question "what is important before you even start thinking of a risk assessment?" The answer D also does not state if this is "upper management" or "risk management" which sounds general statement. Since other answers covers only part of the answer if picked, I take the question as more general and answer to match, which is D.

• Chose A1

  A is the best answer because risk assessment starts with identifying what could go wrong before considering asset value

• 3

  Knowing the value of information assets helps prioritize what needs to be protected and to what extent. It guides the allocation of resources and effort in the risk assessment process. High-value assets require more rigorous assessment and protection measures compared to lower-value assets. Management culture affects the implementation and acceptance of risk management practices but does not directly determine the approach to risk assessment.