CRISC Question 390

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Whilst A is a good contender, I would say D is the best answer.

• Chose D1

  D. To identify gaps in risk management practices Explanation: Global standards related to risk management, such as ISO 31000, provide best practices and standardized approaches to managing risk. These standards offer a benchmark for organizations to measure their current risk management practices against recognized and accepted practices. The primary reason to use these standards is to identify and address any gaps or shortcomings in an organization's current risk management practices.

• Chose A1

  A. To continuously improve risk management processes. The primary reason for a risk practitioner to use global standards related to risk management is "A. To continuously improve risk management processes." Global standards provide a structured and widely accepted framework for risk management practices. By following these standards, organizations can ensure that their risk management processes are aligned with best practices and are continually refined and improved over time. While the other options (building an organizational risk-aware culture, complying with legal and regulatory requirements, identifying gaps in risk management practices) are also important considerations, the use of global standards primarily aims to provide organizations with a solid foundation for effective and efficient risk management practices, leading to ongoing improvement and alignment with industry best practices.