Exam CRISC topic 1 question 470 discussion

I think it’s D because not knowing/ assessing/ mitigating a true risk (which is relevant to the company and not generic) is worse than spending time and resources on an irrelevant risk (waste).

B is corret coz risk owners may focus on irrelevant situations to lead to waste effort

D is correct

I chose D because missing to assess a risk is riskier than wasting resources for assessing an irrelevant risk (option B).

D. Relevant risk scenarios that do not appear in the generic list may not be assessed While using an industry-based generic list can help to start the risk management process, it might miss risks that are specific to the organization's unique context, operations, or environment. If those specific risks are not included in the generic list, they may not be assessed at all, which would leave the organization exposed to unidentified and unmanaged risks. Hence, the biggest concern with this approach would be the potential overlooking of relevant risk scenarios unique to the organization.

Agree 'D'.

Its D, all risk need to be identified for consideration.

D makes sense

I will go with D

I would have picked D. I rather over analyze than under analyzed. Under analyzing may result in missing a critical risk.