Exam CRISC topic 1 question 727 discussion

A. Bottom-up approach would be better for technical scenarios as the employees will provide better technical knowledge.

A. Bottom-up approach When developing technical risk scenarios, especially for a specific system such as an ERP, a bottom-up approach is typically more effective. This approach begins at the technical or operational level and moves upward. It involves a detailed examination of the system components, interactions, vulnerabilities, and threats specific to that system. The bottom-up approach ensures that the unique technical intricacies and risks of the system are taken into consideration. In contrast, a top-down approach begins at the strategic or high-level perspective and moves downward. It's more focused on broader organizational goals and strategies. A cause-and-effect diagram, while useful for understanding the relationship between different factors, isn't the primary tool for scenario development. The Delphi technique is a forecasting method based on the results of multiple rounds of questionnaires sent to a panel of experts. It's not typically the primary method for technical risk scenario development for a specific system.

Believe it would be A. The question talks about the ERP system and the system owner, and bottom up aligns best with risk to systems.

'A' is correct.

Not so obvious for me, but I'd go for A...

agree A

Technical Risk >> Bottom-Up.

I agree with C. See R1-105

C. Top down approach, this approach is driven by business goal

The Delphi Technique is primarily used for anonymous survey. A quick definition below ... Can this technique be really used for this question? The Delphi technique is a structured, anonymous and iterative survey of a panel of 'experts' or participants. It can be used for a variety of purposes ranging from generating consensus on controversial issues to formulating or evaluating policies relevant to conservation.