Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Risk factors might not be relevant to the organization. The greatest concern when using a generic set of IT risk scenarios for risk analysis is that the risk factors might not be relevant to the organization. Generic risk scenarios are typically designed to cover a broad range of potential risks that could apply to various types of organizations. However, the specific risks an organization faces can vary based on its industry, operations, technology stack, and unique circumstances. Using generic scenarios might result in overlooking or downplaying risks that are specific to the organization's environment. To conduct effective risk analysis, it's crucial to tailor the scenarios to the organization's context to ensure that the relevant risks are identified and appropriately assessed.
Agree "C'. But the most important that some risks in the organization might not be included in the generic scenarios
Agree it is C.