Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Changes in senior management. The most likely factor that would result in updates to an IT risk appetite statement is "A. Changes in senior management." When there are changes in senior management, there might be shifts in the organization's strategic priorities, objectives, and risk tolerance. These changes can impact the organization's overall risk appetite and, consequently, necessitate updates to the risk appetite statement to align with the new leadership's vision and direction. While the other options (external audit findings, feedback from focus groups, self-assessment reports) can also provide valuable insights into risk management, changes in senior management often have broader implications for the organization's risk management strategy and risk appetite, making them a likely driver for updates to the risk appetite statement.
Agree it is A.
Agree.