Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. To enable management to implement cost-effective risk mitigation Categorizing risk scenarios by business process is primarily done to enable management to implement cost-effective risk mitigation strategies. By understanding how different risks apply to specific business processes, management can prioritize which risks to mitigate based on the criticality of the process, the impact of the risk, and the cost of implementing controls. This helps ensure resources are efficiently utilized and the most significant risks are addressed first. While the other options may also be beneficial, they are not the primary reason for categorizing risks by business process. They are more related to the side benefits or secondary objectives of the risk management process.
I think it’s A. Question is about grouping and not rating.
Agree.