Exam CRISC topic 1 question 262 discussion

Actual exam question from Isaca's CRISC

Question #: 262
Topic #: 1

You are the project manager of RFT project. You have identified a risk that the enterprise's IT system and application landscape is so complex that, within a few years, extending capacity will become difficult and maintaining software will become very expensive. To overcome this risk, the response adopted is re- architecture of the existing system and purchase of new integrated system. In which of the following risk prioritization options would this case be categorized?

A. Deferrals
B. Quick win
C. Business case to be made
D. Contagious risk

Show Suggested Answer

Suggested Answer: C 🗳️
This is categorized as a Business case to be made because the project cost is very large. The response to be implemented requires quite large investment.
Therefore it comes under business case to be made.
Incorrect Answers:
A: It addresses costly risk response to a low risk. But here the response is less costly than that of business case to be made.
B: Quick win is very effective and efficient response that addresses medium to high risk. But in this the response does not require large investments.
D: This is not risk response prioritization option, instead it is a type of risk that happen with the several of the enterprise's business partners within a very short time frame.

by SuperMax at Oct. 13, 2023, 5:29 a.m.

Comments

Submit Cancel

SuperMax

9 months, 1 week ago

Selected Answer: C

In this case, the identified risk of the enterprise's IT system and application landscape becoming too complex and costly to maintain falls under the category of "Business case to be made." The response to this risk involves re-architecting the existing system and purchasing a new integrated system. This response is a significant undertaking that requires a business case to justify the investment and changes. It's not a quick win, as it involves a complex and long-term solution. It's also not a deferral of the risk, as the risk is being actively addressed. Contagious risk refers to risks that can spread or affect other areas, which does not directly apply to this scenario.

upvoted 1 times

...