Exam CRISC topic 1 question 469 discussion

This question implies that we are managing the risk, so the risk has been identified and assessed.

C. Identify the potential risk Before you can assess and manage the risks associated with wearable technology, you need to identify what those risks are. Once you've identified the potential risks, you can then move on to assessing them, monitoring employee usage, and developing risk awareness training

C. Identify the potential risk The first step in managing the security risk associated with wearable technology in the workplace is to identify the potential risk. Before you can assess the potential risk, you need to first identify what the risks are. Once you've identified the potential risks, you can then proceed to assess these risks, develop risk management strategies (which may include risk awareness training), and monitor the effectiveness of these strategies (which could involve monitoring employee usage).

Feel like the risk needs to be assessed before training can be developed

Agree.

Without identification of risk how to proceed.

C should be right. without identification other process would not make sense.

I think the answer should be C. You need to identify the risk before you can manage it. Also - how can you develop an awareness program if you don't identify the rik first.

I think the answer should be D as the risk needs to be assessed first and then plan on offering and then comes the training...