CRISC Question 227

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  D. identify potential sources of risk Understanding an organization's processes is crucial for a risk practitioner to identify potential sources of risk. A comprehensive understanding of these processes allows the risk practitioner to detect where and how things could potentially go wrong (risks), and what the impacts of these could be on the organization. While performing a BIA, establishing risk guidelines, and understanding control design are all important tasks within risk management, identifying potential sources of risk is most directly related to understanding the organization's processes.