Exam CIS-RC topic 1 question 113 discussion

Entity classes are used to define different types of entities, such as processes, business units, assets, etc., that are subject to risk assessments and compliance evaluations. When conducting risk assessments or compliance evaluations based on different types of entities, using entity classes allows for a more organized and structured approach to managing the assessment process. Option A refers to object-based risk assessment, where entities are associated with risk assessments to evaluate risks at a more granular level. Option E mentions advanced risk assessments, which also benefit from using entity classes to categorize and manage entities efficiently during the assessment process. The other options (B, C, and D) do not specifically involve the use of entity classes in their respective contexts.

C - when we configure the impact assessment, we select the classes to be considered from 'Entity class configuration' module. E - this is straight forward

Regulatory change: - Entity classes determine which entities can be assigned an impact assessment - Impact assessment help determine if event is applicable to the organization RAM: Risk assessment methodologies (RAMS - aka templates) are defined for on entity class (set of entities)