CRISC Question 226

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  D. establishment of a reliable basis for risk-aware decision making.

• Chose D2

  D. establishment of a reliable basis for risk-aware decision making The PRIMARY advantage of implementing an IT risk management framework is "D. establishment of a reliable basis for risk-aware decision making." An IT risk management framework provides a structured and systematic approach to identifying, assessing, and managing risks related to IT systems, processes, and operations. By having a well-defined framework in place, organizations can make informed and risk-aware decisions, ensuring that risks are considered in the context of strategic planning, resource allocation, and overall business objectives.

• Chose D2

  D. establishment of a reliable basis for risk-aware decision making An IT risk management framework provides an organization with a systematic approach for identifying, evaluating, and addressing risks. It gives the organization a way to understand and prioritize risks based on their potential impact and likelihood. This, in turn, provides a reliable basis for decision-making, ensuring resources are used efficiently to manage risks. While all the options provided are potential advantages of implementing a risk management framework, establishing a reliable basis for risk-aware decision making is a primary advantage.