I am going with:
C. The GREATEST concern when assessing the risk profile of an organization is when the risk profile was not updated after a recent incident. An incident can reveal previously unknown risks, highlight vulnerabilities that need to be addressed, and change the organization's risk landscape. Failure to update the risk profile after an incident can result in an inaccurate representation of the organization's risk profile, which can lead to ineffective risk management. While the other options can also be a concern when assessing the risk profile of an organization, they are not as critical as failure to update the risk profile after a recent incident. Historical loss data, the frequency of reviews, and the use of industry standards are important considerations, but they do not have the same impact on risk management as an incident that has not been reflected in the risk profile.
This section is not available anymore. Please use the main Exam Page.CRISC Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CbtL
8 months, 3 weeks agoKoulyo
9 months, 1 week agojohn_boogieman
10 months, 4 weeks agoSuchib
1 year agoJco
1 year, 1 month ago