Exam CRISC topic 1 question 442 discussion

The correct answer is C. understand the organizational risk profile. An IT risk register is a comprehensive document that identifies, assesses, and prioritizes IT risks. It provides a clear and concise overview of the organization's IT risk landscape, which helps management to understand the organization's risk profile.

C "An IT risk register, management gains insights into the specific risks that the organization faces within its IT environment. This includes understanding the nature of the risks, their potential consequences, and the controls or actions that are in place to address them. This understanding is crucial for making informed decisions about risk mitigation strategies, resource allocation, and overall risk management planning."

C. understand the organizational risk profile An IT risk register, a document that records details about identified risks including their descriptions, impacts, likelihoods, and mitigation strategies, best helps management understand the organizational risk profile.

Out of all options, the best one is "C"

Agree C

Obviously to answer this you have to know what a Risk register is: A list of risk that have been identified, analyzed and prioritized.

should be B

At any given point o time, risk register document the entire risk universe of the enterprise, hence its C

The closest answer is C. It helps to understand the Risk profile.

Shouldn't it be 'B'- align IT processes with business objectives??

Yep, C

I support C

I think C

not C?