Certified in Risk and Information Systems Control (CRISC) — Question 1014

Which of the following is MOST useful for measuring the existing risk management process against a desired date?

Answer options

• A. Capability maturity model
• B. Risk scenario analysis
• C. Risk management framework
• D. Balanced scorecard

Correct answer: A

Explanation

The Capability Maturity Model is specifically designed to assess and improve processes, making it the most useful for evaluating the risk management process in relation to a desired timeline. The other options, while relevant to risk management, do not provide the same level of framework for measuring process maturity against specific dates.