CRISC Question 231

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  The question says "is the BEST way to identify changes in the risk profile" this is the as is and to be. Hence doing a gap analysis provides this

• Chose A1

  A. Monitor key risk indicators (KRIs) The best way to identify changes in the risk profile of an organization is to monitor key risk indicators (KRIs). KRIs are specific metrics or data points that are directly linked to the organization's risks. By tracking these indicators, you can gain insight into how the risk landscape is evolving and whether new risks are emerging or existing risks are changing in severity. Monitoring KRIs allows for a proactive approach to risk management, enabling the organization to take appropriate actions to mitigate risks as they evolve.

• 1

  Monitoring key performance indicators (KPIs) (option B) is important for tracking the overall performance of an organization, but KPIs may not provide the same depth of information about changes in the risk profile as KRIs do. Conducting a gap analysis (option C) can help identify areas where the organization may fall short of meeting its objectives or compliance requirements, but it may not be as effective at directly tracking changes in the risk profile. Interviewing the risk owner (option D) can be valuable for understanding individual perspectives on risk, but it may not provide a comprehensive and data-driven view of the organization's risk profile. Therefore, option A, monitoring key risk indicators (KRIs), is generally the most effective way to identify changes in an organization's risk profile.