Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
When an organization is considering acquiring a new line of business and wants to develop new IT risk scenarios to guide its decisions, the factor that would add the MOST value to the new risk scenarios is: B. Expected losses Expected losses are a critical component of risk assessment because they directly quantify the potential financial impact of various risks and scenarios associated with the new line of business. By understanding the expected losses, the organization can make more informed decisions about whether the potential benefits of the new venture outweigh the potential risks. While factors like audit findings, cost-benefit analysis, and organizational threats are important considerations, they are typically assessed in relation to the expected losses. The expected losses serve as a foundation for evaluating the overall risk and making risk-informed decisions.
D. Organizational threats. When considering acquiring a new line of business and developing new IT risk scenarios, the factor that would add the most value to the scenarios is "Organizational threats." Organizational threats encompass a wide range of potential risks that are specific to the organization's industry, operations, technology, and strategic objectives. These threats are more directly tied to the organization's unique circumstances and would provide relevant and actionable insights for guiding decisions related to the new line of business.
Between "B" and "D", going with "D". The best answer for this question to have SWOT analysis. Evaluating threats is part of SWOT.