Exam CRISC topic 1 question 1881 discussion

Actual exam question from Isaca's CRISC

Question #: 1881
Topic #: 1

A risk practitioner is developing risk scenarios for a manufacturing organization that uses highly specialized systems to control its production process. Which of the following will BEST support management decision making that adequately addresses impacts to these systems?

A. Bottom-up approach
B. Event tree analysis
C. Top-down approach
D. Control gap analysis

Show Suggested Answer

Suggested Answer: B 🗳️

by faed87a at May 2, 2025, 11:47 a.m.

Comments

Submit Cancel

trev0r

4 days, 19 hours ago

Selected Answer: B

Bottom-up approach starts with the specific assets and processes. This method is ideal when dealing with unique or complex systems because it ensures that the specific vulnerabilities, dependencies, and operational details of these systems are thoroughly considered. By focusing on the details first, the resulting risk scenarios are more precise and directly relevant to the actual operations, which provides management with the specific information needed to make informed decisions about mitigating impacts to these systems.

upvoted 1 times

...

Hozier

2 months ago

Selected Answer: C

Top down-> Start with business objectives, to high-impact scenarios and finally the risks.

upvoted 1 times

...

faed87a

3 months, 2 weeks ago

Selected Answer: A

its A/

upvoted 1 times

...