Certified Information Systems Auditor (CISA) — Question 965

Which of the following is MOST likely to increase if an organization increases its risk appetite?

Answer options

• A. Audit findings
• B. Key controls
• C. Opportunities
• D. Security incidents

Correct answer: C

Explanation

Increasing risk appetite generally leads to exploring and taking on more opportunities, as the organization is willing to accept higher risks for potential rewards. Audit findings, key controls, and security incidents may not necessarily increase; in fact, they could remain stable or even decrease if managed properly.